Call #1639 · 2026-11-04

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A refund that has to be kept secret and steered from your screen is not a refund, it is a way in.

“The caller wanted the machine steered from his end and left when Bernard said the screen was grey.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access request

refund stayed put, reins unhanded, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, it's Nellie from CloudHarbour Subscriptions. We've sent you a bill for something and I'd like to sort out the refund side of it with you, if you've a moment.
              
                  Fake invoice or refundUnsolicited contact
                
A refund sounds like money coming to you, so the guard drops and the bill gets less scrutiny.
Real company: A real subscription service sends a written bill or refund notice you can check in your own account.

                Bernard
                Oh — hello, Nellie. Was it Clodhopper's, you said? Funny name. Now, before you start — are you warm enough where you're sitting? Only it's turned bitter here, and I've got the back door open for the cat.
              
                Caller
                CloudHarbour, yes. Bitter here too, so I'll keep it short — there's a refund sitting on your account that I'd rather see in your hands than ours, and the paperwork's already half done.
              
                  Greed or reward baitUnsolicited contact
                
An unexpected refund feels like free money, so the target focuses on the reward and drops their guard.
Real company: A real company does not phone out of the blue to hand you money, and refunds arrive through your normal account, not a call.

                Bernard
                A refund, right — well, that's decent of you. Half done is about my speed, mind. Only — hold on, my hearing aid's whistling at me, it does that when I cup my ear. Give me a tick.
              
                Caller
                Take your tick. Thing is, this refund's a bit hush-hush on our end — I'm not meant to be flagging it about, and if you could keep it under your hat, that'd suit me no end.
              
                  Told to keep it secretFake invoice or refund
                
Asking for secrecy cuts the victim off from anyone who would spot the scam and say so.
Real company: A real company never asks you to keep a refund quiet, and it puts everything in writing.

                Bernard
                Under my hat — well, I've a flat cap, will that do? Only I don't wear hats in the house. Keep it from who, though? My neighbour's cat comes round every morning and it's no good at keeping anything quiet.
              
                Caller
                From the others on the account, mainly. Now — so I can get this money moving, could you let me have a look at the account from your end? If you just open it up and pass me the reins, I'll do the rest.
              
                  Remote access requestFake invoice or refund
                
Asking to take control of the account feels like helpful service, so the victim hands over access without noticing the risk.
Real company: A real bank or refund team never needs to drive your device or account, and would tell you to log in yourself through the official app.

                Bernard
                Glasses are out in the greenhouse, by the tomatoes, you see. And Mavis is sat on the table eyeing the machine, so I'd rather not have you rummaging about in it. What was it you needed the money to do?
              
                Caller
                No, no, the money's for you — that's the whole point. Look, I only need a short look at the account so the refund clears — if you just showed me what's on the screen and let me steer, we'd be done in no time.
              
                  Remote access requestFake invoice or refundGreed or reward bait
                
                Bernard
                Steer — like a boat, is it? You'd want the fence man for that, he's got a little dinghy. Anyhow, the screen's on the blink since Tuesday, all grey. It's the aerial, I reckon.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →