Call #2419 · 2026-11-09

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will offer a bonus to fix a billing mistake.

“We need to act quickly before the window closes. Just a moment with the account and we’re done.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

nothing gained, line closed · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, Mr. Thompson? This is CloudHarbour Subscriptions. We’ve spotted a billing mix-up and would like to send a refund your way.
              
                  Fake invoice or refund
                
Creating a false sense of urgency to trick the victim into acting quickly without thinking
Real company: Contact the customer through official channels and provide clear steps to resolve billing issues

                Bernard
                CloudHarbour? I thought it was Cloudfall. Oh, dear — I do get that wrong so often. What’s the best way to send a refund? I’ve just been looking for my glasses. They’re on the table.
              
                Caller
                If I could just check the account, we could make it double — a refund and a bonus. It’s our way of saying sorry.
              
                  Greed or reward bait
                
It exploits the victim's desire for unexpected gains to lower their guard.
Real company: A real company would not offer unexpected bonuses or refunds without clear reason.

                Bernard
                Double? That sounds lovely. I’ve never had a bonus before. Do you have a special colour? I quite like blue. Is the parrot still in the kitchen?
              
                Caller
                We need to keep this quiet for now — just between us. Once the refund is sorted, something nice will follow.
              
                  Told to keep it secret
                
Creating a sense of exclusivity and urgency to prevent the victim from seeking help
Real company: Encourage the customer to reach out to official support channels for assistance

                Bernard
                Keep it quiet? Of course. I never say anything to anyone. Not even the parrot. I do wonder if it’s something new.
              
                Caller
                If you just let me have a look at the account, we can get this sorted straight away. It won’t take long.
              
                  Remote access request
                
It pressures the victim to act quickly without proper verification
Real company: A real company would not ask for remote access to resolve an issue

                Bernard
                Let me get my glasses. I do get them wrong so often. I wonder if the cat would like a refund too.
              
                Caller
                We need to act quickly before the window closes. Just a moment with the account and we’re done.
              
                  Urgency or fearRemote access request
                
Creating a false sense of urgency pressures the victim into quick action without thinking
Real company: A real company would never ask for remote access to your account

                Bernard
                I’ll be right back. I need to check if the parrot has a refund too. She’s been quite peckish lately.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →