Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #1864 · 2026-11-06

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to keep a secret to get a refund.

“Oh — I wonder if it’s all right. Let me just reach for my reading glasses. They’re always slipping off.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller walked away, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello? Yes, this is CloudHarbour Subscriptions. We’ve noticed an unexpected charge on your account and would like to issue a refund.
Fake invoice or refund

Creating a false sense of urgency to trick the victim into acting quickly without thinking

Real company: Contact the customer through official channels and provide a clear explanation of any charges

Bernard Oh — I do so hope it's not that ghastly thing with the clouds — I’ve never heard of them, but I did get a letter about it, didn’t I? Let me find my reading glasses. Oh, they’re on my head. Would you like some tea?
Caller If you just let me check it, I can sort this out quickly. There might even be a small bonus for your trouble.
Greed or reward bait

Offering a bonus creates a false incentive to comply with the scammer's requests.

Real company: A legitimate company would not offer unexpected bonuses for resolving an issue.

Bernard A bonus? That sounds very kind of you. I do so hate unexpected charges. Let me just have a look at that letter again. Oh — I think it was from something else, wasn’t it? The one with the ducks?
Caller We need to keep this between us for now — if we don’t, the refund might not go through.
Told to keep it secret

Creating a sense of secrecy makes the victim feel isolated and more likely to comply without seeking help

Real company: A legitimate company would encourage you to share concerns with trusted friends or family

Bernard Oh — I see. Let me just pop to the kitchen and make some tea. I do hate keeping secrets, but I suppose it’s for the best.
Caller I’ll wait right here. Just a moment — I need to make sure the paperwork is in order.
Remote access request

The caller creates a false sense of urgency to trick the victim into allowing remote access.

Real company: A real company would never ask for remote access to your device to process paperwork.

Bernard Oh — I do hope it’s not too complicated. Let me just check if Mavis is looking for me. She’s been quite vocal today.
Caller I’ll just hold for a moment — this is very important, and I need to get it right.
Remote access request
Bernard Oh — I do hope it’s all right. Let me just reach for my reading glasses. They’re always slipping off. **Revised line:** Oh — I wonder if it’s all right. Let me just reach for my reading glasses. They’re always slipping off.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →