Call #2054 · 2026-11-07

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“Honestly, I don't know why I bother. Good afternoon.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

nothing gained, line closed · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello? Yes, I can help with that. You've received a charge for a subscription service — I'm calling to offer a full refund.
              
                  Fake invoice or refund
                
It creates a false sense of urgency to get the victim to act quickly
Real company: A real company would not offer unexpected refunds over the phone without verification

                Bernard
                Oh — well — now, I do seem to have a letter about that. It came in the post yesterday, but I thought it was a bill from the council. Do you know, I've never seen that name before — CloudHarbour? It sounds rather like a place for ships.
              
                Caller
                That's exactly what it is — a service for people who need secure storage online. If I can just check the details, I can make sure the refund is processed swiftly.
              
                  Greed or reward bait
                
It promises a refund to entice the victim into sharing personal information
Real company: A real company would not offer unexpected refunds without verification

                Bernard
                Yes, I see — secure storage. I do like that idea. I've got a lot of old letters I've been meaning to sort out. Would you mind if I pop on the radio? I do seem to have lost my reading glasses again.
              
                Caller
                I'll wait — just a moment. Now, about that refund, I can have it sorted in a few minutes if you're happy to let me access your account.
              
                  Told to keep it secret
                
It creates a false sense of privacy to avoid scrutiny
Real company: A real company would never ask for private access to your account

                Bernard
                Oh, access — I do hope it's not too much bother. I've been meaning to try that new app for managing the garden. Would you mind if I look for my slippers? It's been rather chilly in here.
              
                Caller
                I understand — just let me know when you're ready. Once I've accessed the account, the refund should be back in your inbox before long.
              
                  Remote access request
                
The caller suggests a quick fix that requires giving up control
Real company: A real company would never ask for remote access to your account

                Bernard
                I do hope it's not too much trouble — I've been meaning to tidy the study. Would you mind if I pop outside for a moment? The cat has been rather noisy, and I need to check on her.
              
                Caller
                I'll wait — the refund is on hold until we sort this out.
              
                  Remote access request
                
                Bernard
                Oh — I do hope it's not too long. I've been meaning to call the postman about that letter. Would you mind if I get the radio on? It's been rather quiet in here.
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →