e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2849 · 2026-11-12

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“I’ll just have a look at the garden for a moment.”

Fake invoice or refundGreed or reward baitRemote access requestTold to keep it secretUrgency or fear

caller stalled, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello? CloudHarbour Subscriptions, can I speak to Bernard? We’ve received a request for a refund, and we need to verify your details.
Fake invoice or refund

Creating a false need for verification to trick the victim into sharing personal details.

Real company: A real company would process refunds through secure, verified channels without demanding personal information over the phone.

Bernard Hello? Oh, yes, that's me — Bernard. I'm just finishing my tea. What refund? I don't recall ordering anything from CloudHarbour. Wait — is that the same company as CloudBleu? They sent me a letter last week about a subscription I didn't sign up for. It said something about a monthly charge for a software I've never heard of.
Caller That’s the one. We’re trying to reverse the charge — if you’ll just let us access your account for a moment. We can sort it out straight away.
Greed or reward baitRemote access request

It offers a quick fix to a problem and asks for access to trick the victim into giving up control

Real company: A real company would not ask for remote access to fix an issue and would explain the process clearly

Bernard Oh — I see. Let me check the letter again. I think it was CloudBleu, not CloudHarbour. Wait — was it Monday I got it? No, that was last Friday. I’ll have to find it. I left it on the table. Do you mind if I put you on hold for a moment?
Caller We can’t do that — the refund needs to be processed today. Just let me have a look at the account, and we’ll get it sorted.
Told to keep it secret

It creates a sense of urgency and secrecy to prevent the victim from seeking help

Real company: A real company would never ask you to keep a refund secret and would provide clear, transparent instructions

Bernard I do hope it’s not too much trouble. I’m just going to get my reading glasses. I don’t want to make a mistake. You know, I once tried to log on to a service and ended up buying a vacuum cleaner by accident. It was most embarrassing.
Caller I understand — but we need to get this sorted quickly. Just let me in, and we’ll make sure there’s no mistake this time.
Remote access request
Bernard I’m not sure I like the sound of that. Let me check the letter again. Oh — there it is. It says "CloudHarbour" at the top. I must have misread it. I don’t want to cause any trouble. I’ll just have a look at the garden for a moment.
Caller We don’t have time for that — the refund is time-sensitive. Just let me in, and I’ll make it quick.
Urgency or fearRemote access request

Creating a false sense of urgency pressures the victim into acting without thinking

Real company: A legitimate company would never ask for remote access to your device

Bernard I don’t know if I’m supposed to be doing this. Let me see — was it Monday I got the letter? No, that was last Friday. I think I’ll just leave it for now. You’ve been very helpful.
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →