Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #498 · 2026-10-23

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your own screen is not a company calling you, and no support desk needs to be let inside your machine.

“Bernard said nobody had been let into that machine, not even the man who put the aerial up, and the caller gave up the line.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problemsUnsolicited contact

no entry given, the offer of a second call declined · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the right place. That warning on your screen, the red one — that's why you're calling, isn't it?
Fake pop-up with phone numberFake authority or brand impersonation

Confirming the reason for the call makes the warning feel real and puts the caller at ease.

Real company: A real company does not put a phone number in a warning pop-up and wait for you to call it.

Bernard Oh, hello there. Well, there's a great red thing across the whole screen, yes. Are you warm enough where you are? Only it's turned chilly here. I was just about to put the fire on.
Caller Never mind the fire, sir, that red thing is the problem. It means something's got in, and every minute you leave it, the more it goes through.
Urgency or fearFake pop-up with phone number

It pushes the listener past the obvious false alarm and makes delay feel dangerous, so panic replaces checking.

Real company: A real security team tells you what was found, in writing, and gives you time to verify it through official channels.

Bernard Goes through what, though? Sorry, my left ear's a bit off. And I've a library book here three weeks overdue, so I don't want anything else going through.
Caller The book can wait, this is rather more pressing. I'm from SafeNet Billing, the security division, and that alert on your screen is one we issued.
Fake authority or brand impersonationFake pop-up with phone number
Bernard SafeNet Billing. Right. Well, I've a nephew in something like that, plumbing I think it is. Now, is this red business catching? Because I've a bird on the other side of the room.
Caller It's not catching and it's not about the bird. Look, I need to check that machine of yours myself — if you just let me have a look at it, I can see what's got in and clear it off.
Remote access requestFake scan or planted problems

Offering to look inside the computer sounds like hands-on help, so the victim feels relief and hands over control.

Real company: A real support team never takes remote control of your machine from a cold call. You contact them first.

Bernard Let you have a look at it — how would that work, then? Only I've never got the hang of the thing, and there's something on the radio in a minute I quite wanted.
Caller I'll be on the line the whole time, you won't have to work anything out. Just let me into the machine and I'll do the looking, that's rather the point of me being here.
Remote access requestUnsolicited contact

Offering to do all the work removes effort and makes handing over control feel like a favour.

Real company: A real support team never asks to take control of your computer from an unexpected call. You call them.

Bernard Oh, you're very good. But I don't think anyone's been let into that, not even the man who put the aerial up. What was it you wanted to look at again — the screen?
Caller I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →