Call #1564 · 2026-11-04

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A refund that requires letting a stranger into your machine is not a refund, and asking you to keep it quiet is the tell.

“The caller wanted quiet and a way in, and Bernard offered the weather and a question about lunch.”

Unsolicited contactFake invoice or refundGreed or reward baitRemote access requestTold to keep it secretUrgency or fear

money dangled, door kept shut, caller resigned · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                CloudHarbour Subscriptions here, about that bill that came through to you — the one for the annual plan. It's flagged as an error on our side, so there's a refund sitting on it with your name on it.
              
                  Unsolicited contactFake invoice or refund
                
It invents a bill you never expected, then flips it into free money, so relief replaces suspicion.
Real company: A real subscription service emails a receipt you can check in your own account, and never phones out of the blue about a refund.

                Bernard
                Cloud Harbour, you say? I knew a fellow once who kept a boat at a harbour, little thing, always bailing it out. Oh — a refund, is it? Well now, that's decent of you. What was the bill for again, the annual whatsit?
              
                Caller
                CloudHarbour Subscriptions, the entertainment side of things. And the refund's a fair bit more than what you were billed, so it's worth sorting — I just need to get into the account to release it.
              
                  Greed or reward baitRemote access requestUnsolicited contact
                
A refund bigger than what was paid makes people focus on the gain and stop checking whether the call is real.
Real company: A real company refunds to the original payment method and never needs to get into your account to release money.

                Bernard
                More than I paid? That doesn't add up. Wait — I've my glasses to find. Oh, the back step wants painting, and I think the paint tin's sat on them. You said you need into what, the account?
              
                Caller
                Just so I can see it on my side of the desk, that's all. And keep it under your hat for now, would you — it's not the sort of thing that should be doing the rounds.
              
                  Told to keep it secretUnsolicited contact
                
Asking for secrecy isolates the person and stops a friend or family member from spotting the problem.
Real company: A real bank or tax office never asks you to keep a call private, and welcomes you checking with someone you trust.

                Bernard
                Under my hat, right you are. Though I've a head that lets things slip, ask my sister. And what is it you'd be wanting me to look at, exactly? I shouldn't like to open the wrong thing.
              
                Caller
                You won't be opening a thing — I'll do the looking, you just need to let me onto the machine from here. It's the only way the refund clears before it times out.
              
                  Remote access requestUrgency or fearFake invoice or refund
                
Offering to do the work for you feels helpful, and a ticking clock stops you from pausing to check.
Real company: A real refund needs no remote access to your device, and it never expires in minutes.

                Bernard
                Times out, does it? Hm. There's a woman on the wireless who says never let anyone onto anything, but she also says the moon's a balloon, so. Are you eating properly, by the way?
              
                Caller
                Eating fine, thank you. Look, the clock's running down on this and I've a stack of these to get through — can we just have you let me in and we'll both be done?
              
                  Remote access requestUrgency or fear
                
                Bernard
                Stack of these to get through, and me keeping you. That's rude of me. The step wants painting before the cold comes, you see, and I've been at nothing else. What was it again — the Harbour, was it?
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →