Call #1424 · 2026-11-02

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A refund that requires letting a stranger into your account is not a refund, it is a request for access.

“The caller offered money back and Bernard offered a cup of something, and neither was taken up.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

refund unapproved, caller off the line · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Mr. Bernard? It's Owen at CloudHarbour Subscriptions — I've got a bill here on your email for a yearly plan you never signed up for, and I'd like to get that money back to you.
              
                  Fake invoice or refundUnsolicited contact
                
A surprise charge on your own account triggers alarm, and the offer to return money makes the caller seem helpful rather than threatening.
Real company: A real subscription service emails a written bill and never calls to arrange a refund over the phone.

                Bernard
                Sorry, I've lost the thread of it — now, what was it you were saying?
              
                Caller
                Sorry, I do ramble on. The point is there's a refund sitting here with your name on it, and once we get the account looked at it goes straight to you.
              
                  Greed or reward baitFake invoice or refund
                
A promised payout makes people focus on the reward and overlook why a stranger is asking about their account.
Real company: A real company refunds to the original payment method and never ties a refund to looking at your account.

                Bernard
                Ah, well, that's kind. Which company did you say? I had one about the harbour once, on the wireless, lighthouses and all — 1987, it'd have been.
              
                Caller
                CloudHarbour Subscriptions, that's the one. And the refund's already approved on this end, so it's just a matter of getting into the account. Keep it between us, would you — the department doesn't like these things being discussed before they're settled.
              
                  Told to keep it secretFake invoice or refund
                
Asking for secrecy cuts the person off from anyone who would spot the odd request, and the approved refund makes the caller feel chosen.
Real company: A real company never asks you to keep a refund quiet, and it puts any refund in writing through your normal account.

                Bernard
                Between the two of us, then. Mum's the word. Would you like a cup of something while you're at it?
              
                Caller
                Very good of you, but I can't stop. Now, the easiest way forward is if you let me have a look at the account myself, remotely, from this end — then the refund's done and dusted.
              
                  Remote access requestFake invoice or refund
                
Offering to take over the task sounds helpful, and the promise of a quick refund makes handing over control feel like the fast, easy choice.
Real company: A real company never asks to connect to your device to process a refund, and refunds are paid back to the original payment method.

                Bernard
                Remotely? Oh, I see. I did have a young lad look at the radio once, and it never was the same. What sort of thing am I meant to be looking at, exactly?
              
                Caller
                Nothing complicated, that's the beauty of it — I just need you to let me in from where I'm sitting so I can move the paperwork along. You won't have to do a thing after that.
              
                  Remote access requestUnsolicited contactUrgency or fear
                
Asking to connect remotely sounds like a small favour that speeds things up, so the victim hands over control without noticing.
Real company: A real company never asks to take remote control of your computer to sort out an invoice or refund.

                Bernard
                You've lost me a bit. Let you in where — the sitting room? Only the front step's a bit slippy and I've not got my shoes on.
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →