e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2249 · 2026-11-09

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to keep a refund secret to process it.

“I'm here to help with the refund, but we need to verify the account details. That's all that's needed.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller left, refund promise unfulfilled · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello? Good afternoon, I'm calling about the invoice you received from CloudHarbour Subscriptions. I can sort this out quickly if you let me check your account.
Fake invoice or refund

It creates a false sense of urgency to get the victim to act quickly without thinking

Real company: A real company would not call to resolve an invoice issue without prior contact

Bernard Hello? Oh — good afternoon — I'm Bernard. I did get an invoice, yes, but I don't think I've signed up for that. I've got a photo of a cat with a hedgehog, and I was just about to show it.
Caller I see — but if we can resolve this now, I can arrange a full refund. That would be most helpful.
Greed or reward bait

offering a refund creates a false sense of urgency and trust

Real company: a real company would not offer unexpected refunds over the phone

Bernard Oh — a refund — that would be kind. I've got a refund for something once, but it came in the wrong box. Let me just check the garden — the cat with the hedgehog is rather cheeky.
Caller I'm sorry, but we need to keep this on the line. If we're to process the refund, it's best we don't mention it to anyone else.
Told to keep it secret

It creates a sense of urgency and secrecy to prevent the victim from seeking help or verification.

Real company: A legitimate company would encourage the customer to consult with others or verify the request through official channels.

Bernard Oh — I wouldn't tell anyone. I once told someone about a refund, and they squawked about it for hours. Let me just see if the photo's in focus.
Caller I understand — but if you could just let me look at the account, I can make sure the refund goes through correctly.
Remote access request

It tricks you into giving control of your device to the scammer

Real company: A real company would never ask for remote access to your device

Bernard Oh — the account — I'm not sure I've got one. Let me just check the garden — the cat is rather cheeky again.
Caller I'm here to help with the refund, but we need to verify the account details. That's all that's needed.
Remote access request
Bernard Oh — the details — I don’t keep them on the table. Let me just check the photo again.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →