Call #2454 · 2026-11-10

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No company will ask you to show photos to process a refund.

“I’ve just remembered — the photograph’s in the drawer by the window. I’ll get it.”

Fake invoice or refundGreed or reward baitFake verification (CAPTCHA) instructionsTold to keep it secretRemote access request

script exhausted, no access · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, Mr. Thompson? This is CloudHarbour Subscriptions. We’ve noticed an unexpected charge on your account, and we’d like to issue a refund — if you can just let us check the details.
              
                  Fake invoice or refund
                
Creating a false sense of urgency to get the victim to comply without thinking
Real company: Contact the customer through official channels and ask them to reach out if they have a problem

                Bernard
                CloudHarbour? Oh — I thought it was CloudHorizon. My son mentioned that once. What was the charge for again? Something about a subscription? I do hope it wasn’t for that new garden gadget. I’ve never been good with gadgets.
              
                Caller
                Yes, the subscription — we’re offering a full refund, but we need to verify the account. Could you just let me take a look? It’ll be quick, I promise.
              
                  Greed or reward baitFake verification (CAPTCHA) instructions
                
The promise of a refund creates a false sense of urgency and trust
Real company: A real company would not ask for remote access to verify a refund

                Bernard
                I don’t know what that involves, but I’ve got a photograph here that I’ve been meaning to describe. It’s rather splendid. I don’t suppose it would matter if I showed you?
              
                Caller
                I’m sorry, Mr. Thompson — I can’t help with that. We just need to confirm the refund. It’s standard procedure.
              
                  Told to keep it secret
                
It creates a false sense of urgency and secrecy to prevent the victim from seeking help
Real company: A real company would be transparent and allow the customer to confirm the refund openly

                Bernard
                Standard procedure? I was just about to make a pot of tea. Would you like some? I’ve got a lovely cup.
              
                Caller
                I’m sorry, but we really need to sort this out. Just let me check the account, and we’ll get the refund processed straight away.
              
                  Remote access request
                
The caller pressures the victim to act quickly and trust them with sensitive information
Real company: A real company would not ask for remote access to resolve an invoice or refund issue

                Bernard
                I’ve just remembered — the photograph’s in the drawer by the window. I’ll get it. One moment.
              
                Caller
                I’m sorry — I can’t wait. We need to fix this now. Just let me have a look at the account.
              
                  Remote access request
                
                Bernard
                I see. I was just about to describe it. It’s of a garden, quite splendid. I don’t know if it’s routine, but it’s very dear to me.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →