Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #773 · 2026-10-26

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a person. Real support never rings you first to get inside your machine.

“The caller asked for a bit of access on Bernard's end, and Bernard asked whether access comes in the post.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsRemote access requestUnsolicited contact

no access granted, caller clocked off early · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing support, you've reached the line shown on the warning — is this the householder? The screen in front of you is flashing a serious infection notice.
Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear

The caller ties himself to the warning already on the screen, so the number feels like proof he is official.

Real company: A real security company never puts a phone number in a warning and waits for you to call it.

Bernard Oh — well — now, that screen's been carrying on all morning. Is it the SafeBelt people? I've got a fella coming about the milk and I owe him two pound, so I'm a bit all over the place. What was it flashing again, love?
Caller SafeNet Billing, yes. And the milk can wait, because that infection notice means the trouble's already inside the machine — it needs looking at before the day's out, and I don't say that lightly.
Urgency or fearFake scan or planted problems

A deadline plus a claim that harm is already present pushes people to act before they can think it through.

Real company: A real security firm explains findings in writing and never rushes you into a same-day fix by phone.

Bernard Inside the machine, you say. Mind, our Derek had something inside his machine and it turned out to be a bit of toast. Are you warm enough where you are? It's perishing here and I've not lit the fire yet.
Caller Look, it's not a bit of toast, and I'm not here to chat about the weather — I'm the technician assigned to your case. So how about we sort that screen out now?
Fake authority or brand impersonationUrgency or fear
Bernard A technician, right you are — I've got a man coming for the gutter on Thursday, is that the same sort of thing? Only he's bringing his own ladder. Sorry, you were saying about the screen. What colour is it meant to be when it's behaving?
Caller No ladder needed, and the colour's beside the point — it's the warning I'm on about. Listen, the quickest way past this is if I just have a look at the machine myself.
Remote access requestFake scan or planted problems

Offering to look himself sounds helpful and confident, so the target feels relief and stops questioning the warning.

Real company: A real software company never asks to take control of your computer from an unexpected call. It points you to its official support page.

Bernard Have a look yourself? Oh, that's kind, but the machine's up in the spare room and there's boxes all over the landing. Would you be wanting me to fetch it down? Only I don't think I could lift it, truth be told.
Caller You won't need to lift a thing — it stays where it is. I just need a bit of access on your end so I can see what's going on in there.
Remote access requestUnsolicited contact

Offering to do all the work removes effort and makes handing over control feel like a small, helpful step.

Real company: A real support team never asks to connect into your device from an unexpected call. You call them, through the number on your bill or their official site.

Bernard Access, right. Well — now — I'm expecting a fellow at the door shortly about a small debt of mine, so I'll need to see to him first. Is the access something you carry with you, or does it come in the post?
Caller Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →