Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #8 · 2026-10-18

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

15
Minutes wasted
5
Red flags found
10
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen with a phone number is bait. Real companies do not cold-call you about it or ask to look at your screen.

“The caller offered to look at the screen from his end. Bernard offered tea and a parrot update instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearUnsolicited contactRemote access request

nothing gained, kettle boiled, session never started · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing, good afternoon. You're through to the support line for the warning on your screen — am I speaking to the account holder?
Fake pop-up with phone numberFake authority or brand impersonation

It treats a scary pop-up as a real alarm and a phone number as proof of a real company, so the person feels they called the right place.

Real company: A real security company never puts a phone number in a warning pop-up and never asks you to call it.

Bernard Oh — hello there. SafeBelt, did you say? Now that's a name I'd remember. Yes, the warning's still up, big red thing. It's been staring at me all through my tea. Are you warm enough where you are? It's turned quite chilly here.
Caller SafeNet Billing, yes. Now that warning is serious — it's still spreading while we chat, so I'd like you to stay right there by the machine.
Urgency or fearFake authority or brand impersonation

A ticking threat makes people act fast and stop checking, and a confident company name borrows trust.

Real company: A real security team gives you time to verify and points you to official contact details you look up yourself.

Bernard Spreading, is it? Like damp. My cousin Ronald sold insurance, and he said things always spread if you don't see to them. He's dead now, mind. Anyway — spreading where, exactly? Mavis hasn't said a word about it.
Caller Well — everywhere on the machine, that's the thing. Look, I'm from SafeNet Billing, we handle these warnings, so it's rather fortunate you rang us and not someone dodgy.
Fake authority or brand impersonationUnsolicited contact

Claiming to be the official handler of the warning makes Bernard feel lucky and safe, so he stops questioning who they are.

Real company: A real billing company does not cold-call about warnings on your computer, and would give you a reference number to verify independently.

Bernard Well that is lucky. SafeBelt again, is it — I'll get it in a minute. Is it a service you pay for, or is it like the telly licence where they send the man round? Only Ronald always said never buy insurance off a man who rings you.
Caller No payment, nothing like that — it's already covered. All I need is for you to let me have a look at your screen from my end, so if you just give me the nod I'll start the session.
Remote access requestUnsolicited contactFake authority or brand impersonation

Asking to view the screen feels harmless next to a payment request, so the target relaxes and grants control.

Real company: A real support team never takes remote control from an unexpected call. They ask you to contact them through the number on your bill or their official site.

Bernard Oh, have a look, would you? That's kind. Hang on a moment — the kettle's making that noise, the one it makes before it gives up. Back in two ticks.
Caller Take your time. I'll be quick — sorry, no, take your time, I'll wait. Actually, could you just not switch the machine off while you're up?
Remote access request

Small, casual requests keep the machine connected and the helper in control while sounding considerate.

Real company: A real support agent never needs your computer left on and connected while you step away.

Bernard Who's switching anything off? I only turned the kettle on. Anyway, Mavis is watching it — the screen, I mean. She's a parrot. Would this looking-at-the-screen business upset her, do you think? She's sensitive to the doorbell.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →