Call #2814 · 2026-11-12

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“I was just thinking about the radio play I was listening to. It was about a man who tried to get into someone else's computer.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller postponed, no access achieved · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, Mr. Bernard? This is CloudHarbour Subscriptions. We've received a payment for a service you don't recognise, and we'd like to issue a refund.
              
                  Fake invoice or refund
                
It creates a false sense of urgency to get personal information or money
Real company: Contact the customer directly through verified channels to resolve billing issues

                Bernard
                Oh — CloudHarbour? I thought that was the one with the seagulls on the logo — no, wait, the one with the lighthouse. Yes, that's the one. I do recall a letter, but I haven't opened it yet. I was just about to make a cup of tea. Would you like some?
              
                Caller
                We can sort this quickly — just let me check the account, and we'll make sure the refund is processed correctly. It's the least we can do.
              
                  Greed or reward bait
                
It uses the promise of a refund to lure the victim into sharing information.
Real company: A real company would not offer refunds without proper verification.

                Bernard
                Oh, I don't know about that. I've had a bit of a mishap with the garden. The back step needs painting before the rain comes. I do so hate that step — it's always slippery. But you do what you can, don't you?
              
                Caller
                We need to keep this confidential, Mr. Bernard. If we don't, the process could take weeks — and I don't think either of us wants that.
              
                  Told to keep it secret
                
Creating a sense of secrecy makes the victim feel isolated and more likely to comply without seeking help
Real company: A legitimate organisation would encourage you to talk to others and provide clear, public information

                Bernard
                Oh, confidential, yes. I was just looking at the photograph I took of the garden the other day — the one with the fox. It's quite something, really.
              
                Caller
                We can sort this in a minute — just let me get into your account, and we'll make sure everything's above board. It's the quickest way.
              
                  Remote access request
                
It bypasses security and gives control to the scammer
Real company: A real company would never ask for remote access to your account

                Bernard
                Oh — the account. I was just thinking about the radio play I was listening to. It was about a man who tried to get into someone else's computer. Odd, really. But I do enjoy a good story.
              
                Caller
                I understand, Mr. Bernard — but this is different. We just need to confirm a few details, and then we're done.
              
                  Remote access request
                
                Bernard
                Oh, confirm details — I was just about to make a pot of tea. It's been a while since I had a proper cup. Would you like one? I do so enjoy the ritual.
              
                Caller
                I'll try again when the line's behaving. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →