Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #743 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A red warning on your screen is not a company calling you, and no firm needs to reach into your machine to fix it.

“The caller offered authority over the machine, Bernard offered paintwork, and the line closed on an introduction that never happened.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access request

no entry given, no entry taken · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, SafeNet Billing here, you've reached the team that handles the warning on your screen. That's a serious-looking alert you've got in front of you, so shall we sort it out before it spreads?
Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear

It treats the pop-up as real and offers a calm helper, so the target trusts the voice instead of the screen.

Real company: A real security firm never calls about a pop-up. You contact them through a number you look up yourself.

Bernard SafeNet, did you say? I once had a safe that was a Net something — no, that was a fishing net. Anyway, the screen's gone all red and shouty. Do you want a hand with it, or shall I put the oven on?
Caller Red and shouty is exactly what we don't want — that's the infection making itself comfortable. Leave the oven, sir, and let's deal with this before it does any more damage.
Urgency or fearFake scan or planted problems

It reframes alarm as proof of danger, so the victim trusts the caller's calm voice over their own eyes.

Real company: A real security team never diagnoses a device from a phone call and would tell you to close the window and contact support yourself.

Bernard Right you are — and before we get into any of it, there's the back step wanting paint before winter. I keep putting it off. Do you do that sort of thing, or is it just screens?
Caller Screens only, I'm afraid — SafeNet Billing doesn't touch paintwork. Now, that red alert isn't going to clear itself, so let's have a proper look at what's on your machine.
Fake authority or brand impersonationUrgency or fear
Bernard Well, that's a shame, you'd have been welcome to it. Now, bear with me — I've got to put a shovel on the fire, it's gone right down. Won't be a moment.
Caller Sir, the fire will hold — it's the machine I'm worried about. If you'd just let me have a look at the thing, I can tell you straight whether it's the serious infection or not.
Remote access requestUrgency or fearFake scan or planted problems

It pairs a scary claim about the machine with a calm offer to check it, so agreeing feels like the careful choice.

Real company: A real support team never asks to look inside your computer from an unexpected call, and would tell you to contact them through official channels.

Bernard Oh, I'm not worried about the machine, it's been like that for years. What does the red one say? I can't make out the letters without my glasses, and they've gone walkabout again.
Caller I can see it from here, and it's not a friendly message — it wants us to act fast. SafeNet Billing has authority over these cases, so if you let me into the machine I can clear it.
Remote access requestFake scan or planted problemsUrgency or fear
Bernard SafeNet, you said? There was a chap from SafeNet round in the spring about the gutters. Or was it SafeStyle. Let me have a proper look at that screen — where's my glasses gone now.
Caller I'll get someone else to ring you. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →