Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1189 · 2026-10-30

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A refund that needs your account opened from their end is not a refund, it is someone asking for the door.

“The caller wanted the account opened so the credit could be released, and the householder asked whether his door needed a key.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

credit unmentioned, door unopened, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Mr Bernard? It's Wren at CloudHarbour Subscriptions — I've got a bill here in your name for a renewal you never asked for, and I'd like to get it reversed.
Fake invoice or refundUnsolicited contact

An unexpected bill in your name creates alarm, and the offer to fix it makes the caller seem helpful.

Real company: A real subscription service sends written notice and never reverses charges over an unsolicited phone call.

Bernard Oh — CloudHarbour, is it? I knew a Harbour once, but she was a boat, not a subscription. Reversed, you say. Now then, is that the sort of thing that needs a stamp on it, or does it just happen?
Caller Ha — well, this is the good part, because not only do we wipe that charge, there's a little credit that comes with it for the inconvenience. It's sitting there waiting, it just needs the account opened up so it can be released.
Greed or reward baitFake invoice or refund

An unexpected reward flips the mood from worry to eagerness, so the person stops checking and starts cooperating.

Real company: A real company refunds to the original payment method automatically and never ties a credit to opening an account.

Bernard Very decent of you. Hold on a tick, the fire's sulking and wants feeding. Are you warm enough where you are?
Caller I'm fine, thank you, plenty warm here. Before you go poking at that — I'd appreciate it if you didn't mention the credit to anyone else just yet, we're not meant to be handing these out, so keep it between the two of us.
Told to keep it secretFake invoice or refund

Asking for secrecy isolates the person and stops anyone sensible from questioning the offer.

Real company: A real company never asks you to hide a refund from family or your own bank.

Bernard Oh, secrets. My cousin Walter kept secrets, mind, and he sold insurance, so they weren't good ones. Right, let's talk about this account of mine — do I need to fetch my reading glasses, or is it a simpler business than that?
Caller Simpler than that, no reading required. I just need to be looking at your account from my end while you're sitting there, so if you'd let me have a look at it, we can sort this out before I lose the paperwork.
Remote access requestUrgency or fear

Offering to look at the account himself feels helpful and time-saving, so the victim lowers their guard and hands over control.

Real company: A real company never needs to view or control your device, and would send written confirmation you can check yourself.

Bernard Before you lose the paperwork — now that's a worry. Papers have a way of wandering off. So how do you see my account from where you are — does it travel down the wire, like?
Caller Down the wire, that's it exactly — but it only travels if you open the door for me on your side. You'd hardly notice, it's a moment's thing, and then I can see the refund sitting there myself.
Remote access requestFake invoice or refund
Bernard Open the door. That's the coal fire's job, and it's being stubborn — needs another shovel or it'll go out entirely. Is your door the sort that needs a key, or does it just swing?
Caller I'll ring you back another day. Bye now.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous