Call #2169 · 2026-11-08

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will ask you to keep a secret to get a refund.

“I'll ring you back another day. Bye now.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller deferred, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, I'm calling about a refund you're due. We've received a claim for a subscription you never took out.
              
                  Fake invoice or refund
                
It creates a false sense of entitlement to get the victim to act quickly
Real company: Contact the customer directly through verified channels to resolve billing issues

                Bernard
                Oh — I don't know about that — I think I might have — I'm not sure — I've never seen a CloudHarbour in my life. What was it again? Oh, a subscription — yes — I think I might have got one once — or was it a HarbourCloud?
              
                Caller
                We can sort it out quickly — there’s a bonus offer for customers who help us confirm their details. Just a small token of appreciation.
              
                  Greed or reward bait
                
It uses a false incentive to trick the victim into sharing personal information.
Real company: A real company would not offer unexpected bonuses for providing personal details.

                Bernard
                Oh, a bonus — that sounds nice. Do you have a programme on at the moment? I've just been watching one about lighthouses — rather old, from 1987 — but very interesting. I think I'll look for my glasses.
              
                Caller
                It’s important we keep this confidential — if we’re to get the refund processed.
              
                  Told to keep it secret
                
Confidentiality pressures victims into isolation, making them less likely to seek help or verify claims.
Real company: A legitimate organisation would encourage you to discuss the matter openly and provide clear, transparent information.

                Bernard
                Oh, confidential — yes, of course — I’m very good at keeping things secret. I wonder where my reading glasses are.
              
                Caller
                We just need to check the account — it’ll take a moment. Then you’ll get yours.
              
                  Remote access request
                
It makes the victim comply by promising quick resolution
Real company: Ask for details without requesting remote access to devices

                Bernard
                Oh — the account — yes — I think I might have one — or was it HarbourCloud? I should really find my glasses.
              
                Caller
                We can get this sorted — just let me have a look at it. I’ll be quick.
              
                  Remote access request
                
                Bernard
                Oh — quick — yes — but I do get a little lost with the programmes — I think I saw one about lighthouses last week — 1987 — do you know, it was very foggy.
              
                Caller
                I'll ring you back another day. Bye now.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →