e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2459 · 2026-11-10

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“I'll send it in the post instead. Save us both the trouble. Goodbye.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller sent it by post, no access given · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, Mr. Bernard? This is CloudHarbour Subscriptions. We noticed an unusual charge and would like to issue a refund.
Fake invoice or refund

Creating a false sense of urgency to trick the victim into acting quickly

Real company: Contact the customer through official channels and not via unsolicited calls

Bernard Hello? Oh — CloudHarbour? I didn’t order anything from you, but I did get an email about a refund. Could you get me the jigsaw? I’ve been trying to fit that last piece in for weeks.
Caller That’s exactly why we’re calling — we want to make sure the refund goes through. If you just let me look at the account, I can sort it straight away.
Greed or reward bait

It creates a false sense of opportunity to get the victim to act quickly

Real company: A real company would not offer unexpected refunds without proper verification

Bernard Oh — the account? I’m not sure I know what that is. Let me get my reading glasses. Have you ever tried something with a missing piece? It’s quite a puzzle.
Caller We’re just trying to confirm the details so the refund can be processed. It will only take a moment — I can look at the account from here.
Told to keep it secret

It creates a false sense of privacy to prevent the victim from seeking help

Real company: A real company would encourage the customer to verify the request with their official support channels

Bernard Wait — I don’t know what the details are. Let me see if the postman left anything. I think I saw a letter from CloudHarbour earlier. It might have been blue.
Caller That’s the paperwork we need — if you just let me have a look at it remotely, we can sort this out without any fuss.
Remote access request

It makes the victim feel helpful and avoids scrutiny

Real company: Ask you to contact support through official channels

Bernard I don’t have any paperwork — but I do have a puzzle. It’s been driving me mad. The missing part is just the right shape, but it won’t fit. Have you ever had that?
Caller We need to get the refund processed — if you just let me look at the account, I can fix it from here.
Remote access request
Bernard I’m not sure I know what an account is. Let me check the garden. There’s something on the table that’s been bugging me all morning.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →