Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #558 · 2026-10-24

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A pop-up that tells you to ring a number is an advert for a thief, not a warning from a company.

“The caller asked to be let into the machine, and Bernard asked for his name, and the line went quiet.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

access never granted, caller hung up short · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing here, you're through to support. That warning on your screen, the full-screen one, that's us flagging your machine, so you've done the right thing ringing the number.
Fake pop-up with phone numberFake authority or brand impersonation

It turns the victim's own alarm into proof the caller is legitimate, so the person feels they made the right move rather than being tricked.

Real company: A real security firm never puts a phone number on a warning screen and never treats a call as confirmation of a problem.

Bernard Oh — well — now. SafeBelt, did you say? That's a new one on me. There's a big blue thing covering everything on the little screen, and I can't get the weather off it. Is it meant to be that blue?
Caller SafeNet Billing, yes, and the blue is the alert, it takes over the whole display on purpose. It won't clear on its own and time isn't on our side here, so I need you to stay with me.
Urgency or fearFake pop-up with phone number

It frames the warning as unstoppable and time-critical, so the person acts fast instead of pausing to check.

Real company: A real security alert names the specific problem and tells you to close the window or contact support through official channels.

Bernard Time's the one thing I've got plenty of, don't you worry. Was that SafeBelt again? Sounds like a seatbelt. Are you warm enough where you are? It's turned bitter out — I've had the heating on since half three.
Caller SafeNet Billing, not a seatbelt, and never mind my heating. Look, this comes straight from the billing side of the company, and that alert means your account's been flagged, so the sooner we deal with it the better.
Fake authority or brand impersonationUrgency or fear
Bernard Billing! Well why didn't you say. Only I had a programme about lighthouses on the other day — 1987, that was, or 89 — and the billing on that was nothing to do with me. Have you eaten? You sound like a man who's skipped his dinner.
Caller Billing's not the telly, it's your SafeNet account, and the lighthouses have nothing to do with any of it. What matters is that warning, and I'm going to need to get a proper look at your machine from my end.
Remote access requestFake scan or planted problems

Offering to look at the machine himself feels like expert help, so the target hands over control instead of doubting the warning.

Real company: A real support team never takes remote control from an unsolicited call, and would point you to contact details you look up yourself.

Bernard From your end? That's clever. Would that be what gets the screen back to normal? Only my neighbour's lad has a look at it and he's back Sunday. Is it a palaver, what you'd do?
Caller It's nothing strenuous, honestly — I simply need to be let into your machine so I can see the display the same as you're seeing it. You'd hardly have to do a thing.
Remote access requestFake pop-up with phone number
Bernard Oh, I'd hardly have to do a thing — that's the sort of thing that lands me in bother. What's your name, by the way? I like to know who I'm talking to of an evening.
Caller Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →