Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #284 · 2026-10-21

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A refund that comes with a secret and a request to be let in is not a refund, it is a way into your account.

“The caller asked to be let in. Bernard offered the back door and a warning about the stick, and the line went quiet.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access request

credit unclaimed, secret kept, door left on the latch · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller CloudHarbour Subscriptions here — I sent over an invoice this morning, and I think it's landed on the wrong desk. Before anything else, can you tell me if a bill came through that you weren't expecting?
Fake invoice or refundUnsolicited contact

It plants the idea of a bill you never agreed to, so you start checking and feel involved before you have agreed to anything.

Real company: A real subscription service emails your own account address and shows the charge in your account, not a cold call asking if you got a bill.

Bernard Oh, an invoice, was it? There was something in the post — well, in the machine, I suppose — and I did wonder. Cloud something or other. What was the name again? I had my glasses on and then I didn't.
Caller CloudHarbour, that's the one. And here's the good part — that bill was raised in error, so there's a credit sitting there with your name on it, and it's rather more than the bill itself.
Greed or reward baitFake invoice or refund

A surprise credit larger than the bill is exciting, and excitement crowds out the checking instinct.

Real company: A real company refunds errors to the original payment method and never dangles a bonus to keep you on the line.

Bernard A credit? Well, there's a thing. More than the bill, you say. Is that the sort of money that would buy a decent jigsaw? Because I've got one on the go with a piece gone missing since about Easter.
Caller That's the sort of money that would buy a very decent one. Now, the refund's approved but the system flags it as a favour, so I'd ask you to keep it under your hat — no mentioning it to anyone at all.
Told to keep it secretFake invoice or refund

Secrecy stops the person from checking with anyone who would spot the refund is invented.

Real company: A real refund team never asks you to hide it, and confirms everything in writing through official channels.

Bernard Under my hat, right you are. Though I don't wear one much indoors. Oh — keep it quiet, you mean. Well, there's only really the two of us here and she's not much of a one for gossip.
Caller The refund can't go through until the account's been checked, so if you'd just let me have a look at it, I'll be in and out before you know it.
Remote access requestFake invoice or refund

It frames access to the device as a routine step in getting money back, so the request feels helpful rather than invasive.

Real company: A real company never needs to look inside your computer to process a refund, and would send it the same way you paid.

Bernard Have a look at the account, right. And where would that be? Is it in the house? Only I've had a bit of a clear-out and I'm not sure what's where anymore. Give me a moment, there's a thing on the radio.
Caller It's not in the house — it's the account itself, the one the bill came from. I just need to be let in to have a look.
Remote access requestFake invoice or refund
Bernard Let in. Oh, I see. Well, the back door sticks something dreadful, so I'd have to warn you. And you're how far away, roughly? Only I don't like to be here on my own when it's getting dark.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →