Call #2804 · 2026-11-12

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will promise gifts to get you to keep things secret.

“I need to look at the account to process the refund. Just a moment, and we’ll be done.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access requestFake authority or brand impersonation

caller left, no gift given · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello? Yes, I can help with that. We’ve received a request to refund a charge that appears on your account. If you could just confirm the details, we can process it immediately.
              
                  Fake invoice or refund
                
Creating a sense of urgency to get the victim to act quickly without verifying the request.
Real company: A real company would ask the customer to contact them directly through verified channels to confirm any refund requests.

                Bernard
                Oh — I see. I was just thinking about that letter I got in the post. It said something about a subscription, but I don’t recall signing up for anything. I do wonder if it’s something to do with the garden.
              
                Caller
                That's exactly what we're looking at. If we can sort this out now, I can arrange a bonus gift for you — something special, just for being helpful.
              
                  Greed or reward bait
                
Offering a bonus gift creates a false sense of reward to manipulate the victim into cooperating.
Real company: A real company would not offer unexpected gifts or rewards to get help from customers.

                Bernard
                Oh, a bonus gift? That sounds lovely. I was just going to make a pot of tea. Do you like tea? I always find it helps when things get a bit confusing.
              
                Caller
                We need to keep this quiet for now — just between us.
              
                  Told to keep it secret
                
Creating a sense of secrecy to prevent the victim from seeking help or verification.
Real company: A legitimate company would encourage you to share concerns with trusted contacts or official channels.

                Bernard
                Oh — just between us? Well, I do have a distant cousin who once sold insurance. He always said the best deals were the quiet ones. But — I do wonder if you’re trustworthy.
              
                Caller
                I'm with CloudHarbour Subscriptions. Let me check the account so we can sort the refund.
              
                  Remote access requestFake authority or brand impersonation
                
It creates a false sense of legitimacy and urgency to gain trust and access to the victim's system.
Real company: A real company would never ask for remote access to resolve an invoice or refund issue.

                Bernard
                I do wish you’d tell me what you’re looking for. I was just feeding the bird — she’s very particular about her seeds. You know, I don’t think I’ve ever seen one with such good taste.
              
                Caller
                I need to look at the account to process the refund. Just a moment, and we’ll be done.
              
                  Remote access request
                
                Bernard
                I don’t know if you’ve seen the garden — it’s a bit of a mess. I meant to tidy it this morning, but the bird’s been very demanding. You know how they are.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →