e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2519 · 2026-11-10

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“I'll ring you back another day. Bye now.”

Fake invoice or refundGreed or reward baitRemote access requestTold to keep it secretUrgency or fear

caller disconnected, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, Mr. Bernard? This is CloudHarbour Subscriptions. We've noticed an unexpected charge on your account and would like to issue a refund.
Fake invoice or refund

Creating a false sense of urgency to trick the victim into acting quickly without thinking

Real company: Contact the customer through official channels and provide clear details about any charges

Bernard Hello? Oh — I'm sorry — I've been looking for my reading glasses. Yes, CloudHarbour? I don't recall signing up for anything. But I do love a good refund. Would you like to come over for tea? I've just baked scones.
Caller That's very kind of you, but we're just trying to sort this out over the phone. If you let me access your account, I can process the refund immediately — and perhaps even offer a small token of appreciation.
Greed or reward baitRemote access request

Offering a refund and extra incentive makes the victim eager to comply

Real company: A real company would not ask for remote access to process a refund

Bernard Oh, I see. Access? I'm afraid I'm not very good with computers. But I do know a good recipe. Would you like something sweet or something savoury?
Caller I need to look at your account to process the refund. Please let me in — it's the quickest way to get this sorted.
Told to keep it secret

the caller creates a sense of exclusivity to prevent the victim from seeking help

Real company: a real company would let you discuss the issue openly with anyone

Bernard I'm not sure I can do that. I've got a cat who's quite particular about visitors. Would you mind if I check the weather first? It's been raining all morning.
Caller We can sort this in a minute. If you just let me have a look, I can get the refund going — and then you can bake in peace.
Remote access request
Bernard I suppose. But I do need my reading glasses. Would you mind if I fetched them? They're probably on the table.
Caller I'll wait here. Just get them quickly — the refund is waiting, and I don't like to keep people waiting.
Urgency or fearRemote access request

Creating pressure to act quickly makes the victim less likely to think critically

Real company: A real company would not pressure you to act immediately and would never ask for remote access

Bernard I'll be right back. I'm rather slow with my hands.
Caller I'll ring you back another day. Bye now.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →