Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #998 · 2026-10-28

The Pop-Up with a Phone Number

pop-up · SafeNet Billing · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Pop-Up with a Phone Number

A warning on your screen is not a phone call, and no real firm needs to look at your machine from there.

“The fault was said to be spreading, and the offer of a look from there was met with a question about aerials.”

Fake pop-up with phone numberFake authority or brand impersonationUrgency or fearRemote access request

warning waved, look declined, caller left to his afternoon · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, SafeNet Billing support here — you've reached the number on the warning. Now, that screen in front of you, the big red one, that's a serious bit of trouble and I'd like to sort it with you this afternoon.
Fake pop-up with phone numberFake authority or brand impersonationUrgency or fear

The caller treats a scary screen as proof of a real problem, so the person believes help has already arrived.

Real company: A real security firm never puts a phone number on a warning screen and never calls you about it.

Bernard SafeNet, did you say? Right you are. Oh — well, now, before we get to the red thing, are you warm enough where you're sitting? It's turned bitter out. I've had the kettle on twice already and it's only the afternoon.
Caller I'm fine, thank you, warm as anything. Now that red warning — it doesn't wait about, you know, it's spreading while we sit here.
Urgency or fearFake pop-up with phone number
Bernard Spreading, is it? Like that ivy along my back fence. The neighbour's cat sits on the post and watches me pull at it. Nice enough animal. Anyway — what colour was the warning again? You said red, didn't you? I've got my glasses somewhere.
Caller Red, yes, big red panel, hard to miss whatever you do with your spectacles. Look, I'm from SafeNet Billing, the firm named on it, so you can take it from me this is a genuine fault.
Fake authority or brand impersonationFake pop-up with phone number
Bernard Oh, I believe you, I do. My cousin Derek sold insurance for years and he always said a firm's name on a thing counts for a lot. Though he got the firm's name wrong half the time. What was it again — Safe something?
Caller SafeNet Billing. And Derek had the right idea, so just let me have a look at your machine from here and I'll have that warning gone in a jiffy.
Remote access requestFake authority or brand impersonationUrgency or fear

It praises the victim's earlier cooperation, then frames remote access as a quick fix so the warning feels solved rather than suspicious.

Real company: A real software or billing company never asks to connect to your computer from an unsolicited call, and would point you to its official support page.

Bernard A look from there? Oh, that's clever. Is it like the telly, then — does it need an aerial? Only mine's a bit temperamental in the wind. Hold on, there's a fox out by the bins.
Caller No aerial, nothing like that, it's all done down the line. Warmer still down the line, if you can picture it.
Remote access request
Bernard Down the line, right. My left ear's not the best, so if I go quiet it's not you. You sound like you've been at it all day.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The warning is a web page, not a diagnosis. Anything can draw a red box and a siren, and the number in it belongs to whoever made the page. The alarm is designed to be frightening enough that the householder rings before thinking, and the person who answers has one job: get remote access, then charge for a "clean-up" that does nothing.

What to do instead

A browser warning is a web page and can always be closed. Do not ring the number on it. Close the tab or the window, and if the browser will not close, restart the computer. If a browser keeps doing it, clear the site data or ask someone you trust to look, using software you installed yourself.

The full scenario page →

Every call · Where to report a real one · ← previous · next →