Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1819 · 2026-11-06

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“I'll ring you back another day. Bye now.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller postponed, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello? CloudHarbour Subscriptions, I'm afraid we have a small issue with your account. We've sent a bill by email, but we're able to refund it — if we can just check a few details.
Fake invoice or refund

It creates a false sense of urgency to get personal details

Real company: Contact customers through official channels without offering unexpected refunds

Bernard Hello? Oh — I do wonder who’s ringing — I’m Bernard Pottle. Yes, I’ve had a letter, but I thought it was something else. Is it important? I’ve had a bit of a day.
Caller That's good news — we're able to offer a full refund, no questions asked. Just a quick look at the account and we'll sort it straight away.
Greed or reward bait

It appeals to the victim's desire for quick gains without effort

Real company: A real company would not offer instant refunds without proper verification

Bernard A quick look? I do wonder if it's something serious. I'm a bit slow with the emails — I've got my reading glasses on my head, I think. Do you have to do anything special?
Caller Nothing special at all — just a quick check to make sure there’s no confusion. We’ll need to keep this quiet between us for now, though, until it’s all sorted.
Told to keep it secret

Creating a sense of secrecy makes the victim feel isolated and more likely to comply without seeking help

Real company: A legitimate company would encourage you to share concerns with trusted friends or family

Bernard Keep it quiet? I do wonder if it’s all right. I’m not very good with secrets — I tell the garden everything. But I’m sure you know best. What do I need to do?
Caller If you're comfortable, just let me into the account for a moment — it’ll be quick, I promise. Then we can get that refund sorted.
Remote access request

It preys on the victim's eagerness to resolve the issue quickly

Real company: Ask the customer to contact support through official channels

Bernard Let me into the account? I do wonder if the parrot would mind — she’s very particular about visitors. I’m not sure I know how. Would it be difficult?
Caller Not at all — just a few clicks, and we’ll be done. You’ll barely notice it happening. Then the refund is yours.
Remote access request
Bernard Just a few clicks? I do wonder if I’d notice at all — I’m not very good with the computer. I’ve got my reading glasses on my head again. Would it be all right if I tried?
Caller I'll ring you back another day. Bye now.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →