Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #623 · 2026-10-24

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives on your screen and hands you a phone number is the scam calling itself, not a company watching out for you.

“The caller offered to look at the machine from their end, and Bernard said he would rather not have anyone rummaging about without him watching.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

warning kept, stranger kept out, caller left first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, SafeNet Billing, you've reached the number on the warning — is this the machine that's showing the full-screen alert?
Fake pop-up with phone numberFake authority or brand impersonation

It treats the alarming screen as real and confirms you did the right thing by calling, so you trust them as the fix.

Real company: A real security firm never puts a phone number in a warning pop-up and never calls you about it.

Bernard Oh — well — now, I did see something take over the screen, yes. Safe-something, you said? I was in the middle of a library book, three weeks overdue if you can believe it, so I've rather let the machine get on with it. What was the name again?
Caller SafeNet Billing, that's right. And I'd leave the book for now, honestly — that warning means the machine's already been got at and it spreads fast if it isn't dealt with.
Urgency or fearFake authority or brand impersonation

It creates panic and a ticking clock, so the person acts before stopping to check whether any of it is real.

Real company: A real security firm never cold-calls about a warning on your screen and never tells you to drop what you are doing.

Bernard Spreads, does it? Hmm. Well, I've got a pot of something on the stove I ought to watch. Is this the sort of thing that would get on with a parrot, do you think?
Caller SafeNet Billing, and I'm the one the alert came from, so you're in the right place. That screen needs dealing with today, not after the stove.
Fake authority or brand impersonationUrgency or fear
Bernard Sorry, I've lost the thread of it — now, what was it you were saying?
Caller What I'm saying is I need to get into your machine from my end to clear that warning off it — so if you just let me have a look, we can sort it in a few minutes.
Remote access requestFake scan or planted problemsUrgency or fear

Offering to fix a problem he invented makes the victim feel helped rather than robbed, and the short timeline stops them thinking it through.

Real company: A real software company never calls to remove a warning and never asks to control your computer. It publishes support steps you start yourself.

Bernard Have a look? Oh, that's kind, but you'd have a job — the machine's upstairs in the back room and my knee's giving me gyp today. Would it keep till Thursday, do you think?
Caller It won't keep, and I don't need you going anywhere — you just let me in on the screen you're on now and I look from here. That's the whole of it from your side.
Remote access requestUrgency or fear
Bernard You'd see it from your end, would you? Well — I shouldn't like to think of anyone rummaging about without me watching. Could you not just tell me what to do, and I'll have a go myself?
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →