Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #708 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A pop-up with a phone number is not a company reaching out, it is a stranger hoping you will call.

“The caller said the breach would only get worse, and Bernard asked whether the machine needed feeding.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestSupervisor hand-off

transfer promised, nobody rang, he asked the name once more · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, support line, you're through to me — I take it you're ringing about the warning on your screen?
Fake pop-up with phone numberFake authority or brand impersonation

The caller confirms the scary warning is real and positions himself as the official fix, so the target trusts him instead of the screen.

Real company: A real security firm never cold-answers a number from a pop-up, and real warnings tell you to close the window and contact them through their official site.

Bernard Oh — well — now, is that the SafeNet people? Only I've got a screen here covered in red, and Mavis is sat on the wireless, so I can't hear the shipping forecast. What did you say you were called again?
Caller That's right, SafeNet Billing. And that red screen is the serious bit — it means your machine is already compromised and every minute it sits there the damage spreads.
Urgency or fearFake authority or brand impersonationFake pop-up with phone number

A scary warning plus a ticking clock pushes people to act before they stop to check whether the warning is real.

Real company: A real security firm never claims a pop-up proves infection, and never asks you to call a number on the screen.

Bernard Spreads, does it? Like the marmalade did, all over the worktop — I made a jar myself Sunday and it's still tacky. Sorry, what was it you wanted me to do about the red?
Caller Sir, please — SafeNet Billing doesn't issue screens like that for its own amusement, this is an active breach. You need to let me have a look at that machine before it's too far gone.
Fake authority or brand impersonationUrgency or fear
Bernard Have a look? Oh, you'd be welcome to a cup of tea if you're passing, but the machine's on the desk by the window and the milkman's due — I owe him two pounds and he gets ever so shirty. What was the name of the firm again?
Caller SafeNet Billing. Forget the window and the tea — if I can just get onto that machine remotely, I can deal with the breach from here. It's the only way it gets dealt with today.
Remote access requestUrgency or fearFake authority or brand impersonation

Asking to connect to the computer feels like fast, expert help, and the deadline makes waiting seem risky.

Real company: A real company never asks to take remote control of your computer from an unexpected call. It writes to you and offers a number you can check yourself.

Bernard Remotely, is it? Now, my nephew put something like that on once and it took him the whole afternoon and then it wanted updating. Is it the sort of thing that needs feeding?
Caller Nothing needs feeding, sir. It's SafeNet Billing, and I've been at this for a while now — I'm not getting anywhere with you, am I? Someone else at the desk will have to take this one on.
Supervisor hand-offRemote access request

Handing off to someone else makes the caller seem patient and official, and resets the conversation so the pressure starts fresh.

Real company: A real billing team gives you a reference number and a number to call back, and never passes you around to keep you on the line.

Bernard Well, you've been very good about it. Mind how you go — and if you do pass by, the kettle's never far off. What was the firm called again?
Caller I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →