Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #943 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a caller's business, and no one needs to be let into your machine to prove it.

“He asked to be let in through the machine and was told about the loose front step instead.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearFake scan or planted problemsUnsolicited contactRemote access request

no entry granted, caller hung up on himself · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller SafeNet Billing here, you're speaking to Dennis. I understand there's a warning on your screen — that's why you rang, isn't it?
Fake pop-up with phone numberFake authority or brand impersonation

He sounds official and confirms the scary warning, so the caller feels they reached the right place.

Real company: A real company does not rely on a number shown in a pop-up, and would tell you to reach them through their official website.

Bernard Oh — hello Dennis. Yes, there's a great red thing across the whole picture, very dramatic. Safe…… Safe something, you said? I've got my glasses somewhere, hang on.
Caller That's the one, SafeNet Billing. Sir, I have to say the machine is flagging itself as compromised right now, and every minute it sits there the worse it gets.
Urgency or fearFake scan or planted problems

A ticking clock shuts down careful thinking, so the target acts fast to stop a threat that does not exist.

Real company: A real support team states the facts plainly and gives you time to verify the problem yourself before anything changes.

Bernard Compromised. That's a strong word for a Tuesday. It's probably the weather in it — it's done nothing but drizzle since Friday. Is it warm where you are?
Caller Never mind the weather, sir, this isn't a Tuesday sort of matter — the warning's from us at SafeNet Billing, and we don't put our name on screen for nothing.
Fake authority or brand impersonationUnsolicited contact

A confident brand name and a claim that the warning is official makes the call feel verified before any check happens.

Real company: A real billing company contacts you through your own account or statements, not a cold call about a warning on your screen.

Bernard Well I'm sure you don't, that's very good of you. SafeNet. I've got it written on the back of an envelope somewhere, I write everything down now. Do you want to hold while I look?
Caller No need to look, sir, I'm right here. What I need is for you to let me have a quick look at the machine myself, just so I can check what the warning's done.
Remote access requestFake scan or planted problemsUrgency or fear

Offering to look himself feels helpful and confident, so the target relaxes and hands over control.

Real company: A real software or security company never asks to take over your computer from an unexpected call, and points you to its official support channels instead.

Bernard Oh, you'd be very welcome, but there's crumbs all over the keyboard — I had a slice of fruitcake over it. Give me a minute to give it a tidy.
Caller Crumbs are fine, sir, I'm not fussy. If you just let me in through the machine, I can see the damage without anyone touching a thing.
Remote access request
Bernard Let you in? You'd have to come round the side, the front step's loose. Are you far away?
Caller Forget it. I'm putting the phone down now.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →