Call #1624 · 2026-11-04

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A refund that needs you to share your screen is not a refund, it is a way in.

“The caller could not get past a screen under a pile of paper and a fire that needed another shovel.”

Unsolicited contactFake invoice or refundGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

credit unclaimed, screen untouched, caller withdrew · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, it's Wren from CloudHarbour Subscriptions — I'm following up on the bill you'll have had by email, and I think there's been a mix-up on our side rather than yours.
              
                  Unsolicited contactFake invoice or refund
                
A friendly admission of a mistake on their side lowers your guard and makes you feel you are owed something.
Real company: A real subscription service shows the charge in your own account and lets you check it there, not over a surprise call.

                Bernard
                Well, that's a relief, because I don't remember ordering anything from a cloud harbour. Mind you, my memory's not what it was since Christmas — or was it the Christmas before. The fire's gone a bit low, hang on while I give it a shovel, will you?
              
                Caller
                Take your time, no rush at all. While you're at it — the lovely bit is that once we've straightened this out, there's a credit sitting on the account that comes back to you, so it's worth getting sorted.
              
                  Greed or reward bait
                
Offering money back makes the target want to keep talking and lowers their guard.
Real company: A real company states any refund in writing and never dangles it to keep you on the line.

                Bernard
                A credit, you say? That's a nice surprise. How much is it, roughly? Only I've a jar of marmalade I made myself that I'm rather proud of, and I'd hate it to go to waste while we're sorting out money.
              
                Caller
                It's not a fortune, but it's yours and I'd rather it landed with you than sat in our system. Between us, mind — I'd keep this quiet from anyone else on the account, just while the refund's in motion, as these things can get muddled if too many people start asking.
              
                  Told to keep it secretFake invoice or refund
                
Asking for secrecy isolates the person and stops a second opinion from catching the lie.
Real company: A real company puts refunds in writing and never asks you to hide them from your own household.

                Bernard
                Oh, there's only me here, so no danger of anyone asking. Must I do something, or will it just turn up on its own? Things arriving by themselves is how I like them.
              
                Caller
                That's the thing, it can't quite release on its own, because the account's showing a lock on our end. If you could just let me have a look at your screen, I can lift it off and the money goes through the same day.
              
                  Remote access requestFake invoice or refundUrgency or fear
                
Offering to fix a vague 'lock' on your screen feels helpful, and the promise of same-day money makes you want to cooperate fast.
Real company: A real bank or refund service never needs to see your screen, and it moves money through your own account without remote access.

                Bernard
                Let me have a look at the screen — oh, the telly's on and I've lost the remote again. No, wait, I'm thinking of the gardening programme from earlier; I keep meaning to watch it. Can't be faffing with screens, I'm afraid.
              
                Caller
                No, not the telly — the computer, the screen you'd read your messages on. If I can't see what's in front of you I can't lift the lock, and the refund sits there until someone does.
              
                  Remote access requestUrgency or fear
                
                Bernard
                There's a screen in the back room somewhere, under a pile of paper. Tell you what, the coal fire's gone low and needs another shovel — give me a moment and I'll think about it when I come back.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →