Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1849 · 2026-11-06

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to let them look at your account for a refund.

“I'm not sure about letting anyone in — I'm a bit of a slow learner.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller left without access, refund not claimed · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, I'm calling regarding an invoice you received from CloudHarbour Subscriptions. We'd like to issue a refund, but we need access to your account to process it.
Fake invoice or refund

Offering a refund creates a sense of urgency and trust to get personal information

Real company: A real company would not ask for account access to process a refund

Bernard Hello, I'm Bernard. I don't recall receiving any invoice from CloudHarbour — perhaps you meant Clarion? I made something sweet yesterday, it's still in the cupboard. Would you like some? I'm not sure if I've got reading glasses on — oh, there they are, on my head.
Caller That's kind of you, but we need to sort this quickly. If you let me check your account, I can make sure the refund is processed properly.
Greed or reward bait

The caller uses the promise of a refund to distract and manipulate the victim.

Real company: A real company would not pressure you to act quickly for a refund.

Bernard I'd rather not let anyone in just yet — I'm a bit of a slow learner. There's a jar I made, do you think it would be enough to pay the bill? Oh, and I'm still looking for my gloves, I left them somewhere.
Caller It's not about payment — it's about confirming your details. If we can just check a few things, the refund will go through.
Told to keep it secret

It makes the victim feel special and less likely to seek help

Real company: Ask you to confirm details openly through official channels

Bernard I see — but I'm not sure I trust the internet just yet. I made something sweet, it's still on the side. I'm trying to find my gloves, they're always disappearing.
Caller We're not asking for payment, just a quick look to make sure everything is in order. It's the quickest way to get the refund to you.
Remote access request

It makes the victim feel it's harmless and quick to avoid suspicion

Real company: A real company would never ask for remote access to your device

Bernard I'm not sure about letting anyone look — I'm a bit slow on the uptake. I made something, it's in the cupboard. Oh, and I'm still looking — they're always on the move.
Caller It's just a quick check to sort the refund. If you let me in, I can fix this right away.
Remote access request
Bernard I'm not sure about letting anyone in — I'm a bit of a slow learner. I made something, it's still on the side. I'm trying to find something, it's always on the move.
Caller I'll get someone else to ring you. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →