Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #723 · 2026-10-25

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A red warning screen with a phone number on it is an advert, not a diagnosis. Real support never rings you first.

“The caller said the fault was visible from his end, and Bernard said the screen was behind a stack of papers.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access requestFake scan or planted problems

warning unread, machine untouched, caller hung up on himself · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, you've reached the number on the warning, how can I help? The screen in front of you should be showing the alert, that's what I'm ringing about.
Fake pop-up with phone numberFake authority or brand impersonation

The caller acts as if the warning already proved itself, so the target treats a random pop-up as a real alarm.

Real company: A real security firm never puts a phone number in a warning pop-up and never calls you about it.

Bernard Oh — hello there. Now, is that SafeBelt? I've got a screen here with a lot of red on it, ever such a lot of red. Are you warm enough where you are? It's turned quite sharp out.
Caller SafeNet Billing, yes. Forget the weather for a moment, sir, because that red screen means your machine is compromised right now and the longer it's left the worse it gets.
Urgency or fearFake authority or brand impersonation

A sudden threat about the machine, paired with a confident company name, pushes the person to act before thinking.

Real company: A real security company does not cold-call about a screen you are looking at, and would tell you to contact them through official channels.

Bernard Compromised, is it? Well. I've got my glasses somewhere. My neighbour's cat sits on the back step and I'm sure it's the same one, though he says it isn't. Were you after the fence? Only that's not done yet.
Caller No, not the fence. I'm from SafeNet Billing and that red screen is an official alert from us, so I need you to pay attention to it before the damage spreads.
Fake authority or brand impersonationUrgency or fear
Bernard SafeBelt, right you are. Well I'm listening, I'm not going anywhere. Are you eating properly, though? My late wife always said you can't think straight on an empty stomach, and she was usually right about that sort of thing.
Caller That's kind, but I really need you to focus on the machine in front of you. Listen, I can see the fault from my end, so if you just let me take a look at it, I'll sort it out in no time.
Remote access requestFake scan or planted problems

It offers to fix a problem you cannot see, so you feel relief and stop questioning whether the problem exists.

Real company: A real support team never takes remote control of your computer from a cold call. You call them first.

Bernard Take a look at it, can you? Well now, the thing is it's in the back room and I'd have to shift a stack of papers off it. I've been meaning to paint the back step before winter, you see, and the papers ended up there instead.
Caller The papers can wait, sir. This is urgent, so could you shuffle over to the back room and tell me what the screen says when you get there?
Remote access requestUrgency or fear
Bernard What it says when I get there. Right you are. Hold on a moment, I'll put the phone down — I've left the radio on in the kitchen. There, that's better. Now. What was it you wanted me to look at?
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →