Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #164 · 2026-10-19

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

15
Minutes wasted
6
Red flags found
10
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A real refund needs no secrecy, no software, and no look inside your computer.

“The refund was offered, the doily was mentioned, and the machine was never switched on.”

Fake invoice or refundUnsolicited contactGreed or reward baitUrgency or fearTold to keep it secretRemote access request

script exhausted, no access, kettle still on · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, is that Bernard? It's Teddy from CloudHarbour Subscriptions, about the bill we sent through this morning. I'll be quick — it's just a refund that needs releasing, nothing for you to worry about.
Fake invoice or refundUnsolicited contact

A refund sounds like free money, so the target relaxes and stops questioning who is really calling.

Real company: A real company never phones out of the blue to release a refund, and would point you to your own account to check.

Bernard Oh — hello, Teddy. Cloud Harbour, did you say? Well, I'm not sure I've ever had a harbour subscription. Does it come in a jar, or is it more of a service?
Caller It's a subscription service, Bernard, and here's the good bit — because of the billing mix-up we can release a credit onto your card today. I'll be quick, it's just a matter of getting the account open.
Greed or reward baitUrgency or fear

An unexpected credit feels like free money, so the offer of a reward lowers the guard that a demand would raise.

Real company: A real company refunds to the original payment method on its own schedule and never needs you to open anything to receive it.

Bernard A credit, you say? Well that's very decent of you. Hang on, I've got a jar of marmalade on the go in the kitchen and it's just at the setting point — I'll be a moment, don't go anywhere.
Caller No, no, take your time — I'll wait. Only, Bernard, when we do sort it, could you keep this between us? Head office doesn't like us flagging these refunds, so best not to mention it to anyone.
Told to keep it secretFake invoice or refund

Asking for secrecy isolates the person, so no friend or family member can question the story.

Real company: A real company never asks you to hide a refund from family or colleagues, and puts everything in writing.

Bernard Keep it between us — of course, of course. Oh, but the milkman's coming and I owe him two pounds, so he'll have to know something's afoot. He's very discreet though. Where were we — the account?
Caller That's fine, the milkman's all right. Look, Bernard, since I can't see your account from my end, the easiest thing is if you just let me have a look at your computer — I'll guide you, it's painless.
Remote access requestUnsolicited contact

Offering to look at the computer feels like helpful service, and the friendly tone lowers the guard before any money is mentioned.

Real company: A real bank or tax office never needs to view your computer and would write to you or ask you to visit a branch.

Bernard Have a look at my computer — well, it's in the back room and it's got a doily on it and everything. Would you be able to see Mavis too? She's the parrot. She'd like the company, honestly.
Caller Mavis can stay, that's fine — I just need to be in the machine itself, Bernard, not the room. If you can pop it on and let me take it from there, the credit goes through today, I promise.
Remote access requestUrgency or fear

Offering to take over the computer removes the victim from the process, so they stop watching what is actually done.

Real company: A real company never needs to control your computer to issue a refund, and would send confirmation in writing.

Bernard Pop it on — right, yes. Is it a big credit? Only I've got a biscuit tin I keep the important bits in, and if it's worth the trip to the bank I'll want the right tin.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →