e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2494 · 2026-11-10

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will offer a refund and bonus without asking for personal details.

“I'll send it in the post instead. Save us both the trouble. Goodbye.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller abandoned, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, I'm calling about the invoice you received from CloudHarbour Subscriptions. We can sort it out if you let me take a look at your account.
Fake invoice or refund

the caller pretends to resolve an issue to gain trust and access personal information

Real company: a real company would direct you to their official website or customer service for help

Bernard Oh — I did get an email about that. I thought it might be from Harbourside, but I'm not sure. Do you know, I meant to write to the council about the garden fence — it's getting rather scruffy.
Caller That's exactly why we're here. If we can just check the account, I can arrange an immediate refund — and a bonus for your trouble.
Greed or reward bait

Offering a bonus creates a false sense of urgency and entices the victim to comply

Real company: A legitimate company would not offer unexpected bonuses or refunds without proper verification

Bernard Oh — a refund, and a bonus? That does sound tempting. I've been meaning to speak to the milkman about that two-pound debt — he's been very persistent.
Caller I'm afraid this needs to stay between us. The usual process would take weeks, but if we act now, it's all in your hands.
Told to keep it secret

creates a sense of exclusivity and urgency to prevent the victim from seeking help

Real company: always provide clear and transparent information without asking for secrecy

Bernard Oh — I see. I do prefer to keep things quiet. I had a distant cousin once who sold insurance — he always said the same thing. Would you like some tea, by the way? I've just made a fresh pot.
Caller I'm sorry, but I need to see the account details to process this. It really is the quickest way.
Remote access request

Asks for account details to bypass security and gain control

Real company: Ask you to contact support through official channels

Bernard Oh — the account details. I do have those somewhere. I was just about to open that letter from the council — it's been sitting on the table for days.
Caller I know this is tricky, but I can help you avoid any further charges if we just look at it together.
Remote access request
Bernard Oh — looking at it together. I do like that idea. I was just thinking about that puzzle I started last week — it’s been quite the challenge.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →