Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1234 · 2026-10-31

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A refund that needs remote access to your computer is not a refund, it is someone asking to be let in.

“The agent promised paper, then asked to be let inside the machine, and the householder asked whether he should stay in the room like the boiler man.”

Unsolicited contactFake invoice or refundGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

offer withdrawn, nothing sent, no way in · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello there, I'm calling from CloudHarbour Subscriptions about the bill that came through on your email this morning — the one for the yearly plan.
Unsolicited contactFake invoice or refund

Naming a bill you never expected makes you scan your memory for it, and the fear of being charged keeps you on the line.

Real company: A real subscription service emails your receipt and lets you check your account yourself, without cold-calling you.

Bernard Oh — hello. Which one, sorry? Cloud something. My hearing's fine, it's just the line. I've got a jar of marmalade on the go and I've lost track of what's in the postbox and what isn't, so you'll have to pardon me.
Caller CloudHarbour, that's the one. And here's the good part — that yearly charge qualifies for a loyalty credit, so once I've had a look at the account you'd actually come out ahead rather than out of pocket.
Greed or reward baitFake invoice or refund

A surprise credit turns a worry into a reward, so the listener leans in and wants the call to continue.

Real company: A real company states the refund terms in writing and never dangles a bonus to keep you on the line.

Bernard Cloud Harbour, right. Come out ahead, you say? My father used to say never trust a bargain you didn't ask for. Now — is it the sort of credit that arrives on paper, or does it just appear? I like things I can hold.
Caller Paper, definitely paper — I'll have the paperwork sent round once we're sorted. Mind you, keep all this between the two of us for now, because the offer isn't meant to be public yet and I'd rather it didn't get about.
Told to keep it secretFake invoice or refund

Asking for secrecy cuts the person off from anyone who would spot the trick and talk them out of it.

Real company: A real company puts refunds and offers in writing and never asks you to hide them from family or staff.

Bernard Between the two of us. Right you are. Though I should warn you, I'm a terrible one for letting things slip — I told the whole bus stop about a refund once and it turned out to be nothing at all. Now, what was it you needed looked at?
Caller The refund's sitting there ready, but it can't move until someone's actually inside the account. So if you'd just let me in on your machine, I can have it done in a minute.
Remote access requestGreed or reward baitUrgency or fear

It pairs a promised reward with a claim that only remote access can unlock it, so the victim trades control for the payout.

Real company: A real company never needs to log into your computer to send you a refund, and refunds go to your original payment method.

Bernard Inside my machine? Oh — well, now, that's the second time this week somebody's wanted in. Is it like the boiler man, where I have to be here while it happens? Only my biscuits have gone and sealed themselves shut and I'd hate to be rude with a lid.
Caller No boiler man, it's all done down the line, you needn't touch a thing. Though while you're at it — have you got the reference from our email handy, or shall I just talk you through what needs doing?
Remote access requestFake invoice or refund
Bernard Down the line, I see. That's clever. Did you say your name was? Only I've got a little dish by the phone with the post in it and there's a letter from a firm with an awfully long name and I've been meaning to sort it.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →