Call #2479 · 2026-11-10

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“I’ve been meaning to mend the garden fence?”

Fake invoice or refundGreed or reward baitRemote access requestTold to keep it secret

caller delayed, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello? CloudHarbour Subscriptions, we've received a refund request on your account. I'm sorry to say there's been an error — we've sent you an invoice by mistake.
              
                  Fake invoice or refund
                
Creating confusion with a fake invoice and refund makes the victim question their own account details.
Real company: A real company would never send an invoice and refund simultaneously without clear explanation.

                Bernard
                Oh, that’s a shame — I never took out a subscription. What did it say it was for? I think I might have signed up for something called CloudHornbuckle instead. Do you know, I’ve been meaning to get the cat to stop knocking things off the table?
              
                Caller
                I see, but this is for CloudHarbour Subscriptions — a separate service. If you let me access your account, I can sort it out right away. There might even be a small bonus for your trouble.
              
                  Greed or reward baitRemote access request
                
Offering a bonus distracts from the request for account access, making it seem more appealing.
Real company: A real company would not offer bonuses for account access and would not ask for remote access.

                Bernard
                Oh, a bonus? That does sound tempting. I’ve been looking for a new garden gnome — would it come with one of those? I do hope it’s not something I’d drop.
              
                Caller
                I'm afraid there's no gnome involved — just a small gesture of goodwill. But if you'd rather not mention this to anyone, we can keep it between us.
              
                  Told to keep it secret
                
It pressures the victim into silence to avoid scrutiny or reporting
Real company: A real company would encourage transparency and reporting of suspicious activity

                Bernard
                Oh, I wouldn’t tell a soul — I’ve got a budgie next door who’s obsessed with the phone. I’ve been meaning to get her a new perch.
              
                Caller
                If you let me access your account, I can fix the error and sort out the refund — and we can leave it at that. Just a quick look, nothing more.
              
                  Remote access request
                
                Bernard
                Oh, a quick look — I’ve got a friend who’s a bit of a expert. I’ll give him a ring. Do you know, I’ve been meaning to mend the garden fence?
              
                Caller
                I understand, but this is a simple matter — just a quick check to release the refund. We don’t need anyone else involved.
              
                  Remote access request
                
                Bernard
                Oh — well — now, I do love a good puzzle. I’ve got one arriving tomorrow. I’ll be busy for a while.
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →