Call #1394 · 2026-11-02

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A refund that comes with a request to look at your computer is not a refund, it is a way in.

“The caller offered to take the reins, and Bernard was weighing a tin lid against switching anything on.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

no reins taken, no account seen, line gone dead · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Morning, it's CloudHarbour Subscriptions here. An invoice went out to your address for a yearly plan, and I'd like to sort the refund while I've got you.
              
                  Fake invoice or refundUnsolicited contact
                
A surprise charge grabs attention, and the offer to fix it makes the caller seem helpful rather than threatening.
Real company: A real subscription service sends billing details in writing and never phones out of the blue to arrange a refund.

                Bernard
                Oh — Cloud Harbour, is it? Well, that's a nice name. Now, an invoice, you say. I've had a look at the post and there's a letter from the water people and something about the back step, but I can't recall a bill. My glasses are about somewhere.
              
                Caller
                No need for the glasses, it's all on our side. Happy news, though — because of how the charge was raised, you're due back a fair bit more than was taken.
              
                  Greed or reward baitFake invoice or refund
                
An unexpected windfall makes people lean in and cooperate, so they stop checking the details.
Real company: A real company states the exact refund amount in writing and never dangles a vague larger sum to keep you on the line.

                Bernard
                Due back more than was taken, you say? That sounds like my sort of arithmetic, though I usually get that sort wrong. How much more, roughly? I've got a tin here I can't get the lid off, so I've got time.
              
                Caller
                I can't put a figure on it off the top of my head, the paperwork's with the accounts team. But it's a decent sum, and I'd rather nobody else got wind of it before it's cleared.
              
                  Told to keep it secretFake invoice or refund
                
Secrecy makes the target feel singled out for a favour and cuts off the friend or colleague who might spot the trick.
Real company: A real accounts team puts refunds in writing with a reference number and never asks you to hide it from anyone.

                Bernard
                Keep it quiet, right you are. The neighbours would only ask, and then I'd have to remember what I'd said. Mind you, accounts teams are a law unto themselves. Are you eating properly, wherever you're sitting? You sound like a man who's had a long morning.
              
                Caller
                That's kind of you. Honestly, I've been on the go since six. Look — to get this moving, if you just let me have a look at the account on your machine, I can push the refund through while we're talking.
              
                  Remote access requestFake invoice or refundUrgency or fear
                
Offering to fix the problem right now feels helpful, and letting someone look at your screen seems harmless when money is promised.
Real company: A real company refunds to the original payment method and never needs to see your screen to do it.

                Bernard
                Six o'clock, that's no sort of start. Now — the machine. Do you mean the wireless in the front room, or the little one in the hall that blinks at me? The back step still wants painting before the cold sets in.
              
                Caller
                Either one, it doesn't much matter, as long as it's the one you use for the post. It's easier if I just take the reins from here and see the account for myself.
              
                  Remote access requestFake invoice or refund
                
                Bernard
                Take the reins, you say. Well, I'd have to get the thing switched on, and I've a tin lid that's beaten me twice this morning. If I leave it much longer it'll weld itself shut.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →