Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #693 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning that arrives with a phone number is an advertisement, not a diagnosis. Real problems do not ring you first.

“The caller claimed a readout flagged to his line, and Bernard said his glasses had gone wherever they fancied.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestUnsolicited contactFake scan or planted problems

no screen shared, no number read, line cleared from their end · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you're through to the support line — you've got a warning up on your screen, haven't you. That's why you rang.
Fake pop-up with phone numberFake authority or brand impersonation

It opens by confirming what Bernard is already seeing, so the call feels like a response to his own action rather than a stranger reaching out.

Real company: A real security company contacts you through its own app or official site, not by a number printed on a warning screen.

Bernard Oh — well — now, I did see something large and red, yes. SafeNest, is it? Lovely name. Only I'd just sat down with the crossword and the radio play was at a rather good bit — a man was about to say something dreadful to his sister.
Caller SafeNet, yes. And that red warning means your machine's already compromised — every minute you leave it, whatever's on there is going further. Can you put the crossword down and look at it properly?
Urgency or fearFake pop-up with phone number

A ticking clock and a claim that harm is already happening push people to act before they think.

Real company: A real security firm never phones from a pop-up and never claims your device is already breached to rush you.

Bernard Compromised, is it? That sounds rather like the potatoes last Tuesday. Hold on — the wireless is still going, that's the trouble, and I can never tell if the sister's married to the other one or not. What was it you wanted me to look at again?
Caller The warning. On your screen. The big red one — I'm looking at the same readout from our end and it's flagged to your line, so we know it's yours. Read me the number shown on it.
Fake authority or brand impersonationFake pop-up with phone number
Bernard A number, on the screen? Oh, I couldn't do that, my glasses go wherever they fancy. They were on the arm of the chair and now they're off somewhere. Are you warm enough where you are? You sound like you're in a chilly sort of room.
Caller I'm quite warm, thank you. Never mind the number — what I actually need is to get onto your machine from here and clear the warning off it for you. Do you think you could let me have a look at it?
Remote access requestUnsolicited contactFake pop-up with phone number

Asking to connect to the computer sounds like helpful service, so the victim focuses on the fix rather than on who is asking.

Real company: A real software company never calls about a warning and never asks to connect to your computer from an unsolicited call.

Bernard That's kind. The bird would give you an earful, mind. What colour is it, this thing of yours? I had a green one once and it never suited the room.
Caller Green's not far off, as it happens. But the thing on your screen won't care what colour anything is — SafeNet's systems are showing a tampered file on your machine and I need to reach in and settle it. Can I just have a moment on it?
Remote access requestFake scan or planted problemsFake authority or brand impersonation

It pairs a scary claim about a hidden problem with a calm, helpful offer to fix it, so agreeing feels like the safe choice.

Real company: A real security company never asks to reach into your computer from an unexpected call. It would tell you to contact them through official channels you look up yourself.

Bernard Oh — well — now. My neighbour's boy does all that side of things, and he's away at the coast till Thursday. Was it a Thursday? He said himself it might be Wednesday. Anyway, tea? Since you're stopping on the line.
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →