e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #2879 · 2026-11-12

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to wait while they send money by post.

“I'll send it in the post instead. Save us both the trouble. Goodbye.”

Fake invoice or refundGreed or reward baitRemote access requestTold to keep it secret

caller sent the refund by post, no access given · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello? CloudHarbour Subscriptions, I'm calling regarding a recent invoice. We've noticed an error and would like to issue a refund.
Fake invoice or refund

Creating a false sense of urgency to trick the victim into acting quickly without thinking

Real company: Contact customers through official channels and provide clear, detailed information about any invoice or refund

Bernard Hello? Oh — I'm sorry — I thought I heard something in the background. Yes, this is Bernard. A refund? Oh, that's very kind. I do have an invoice, but I don't remember buying anything. I'll have to check. I'm a bit confused about the details, to be honest.
Caller We can sort this quickly — if you just let me access your account, I can process the refund right away. You'll be pleased with the outcome.
Greed or reward baitRemote access request

It offers a quick reward to distract from the request for account access.

Real company: A real company would not ask for account access to process a refund.

Bernard Let me get my reading glasses — I'm not sure I can see the numbers clearly. I don't usually let people into my account, but I suppose if it's a refund... I'll have to think about it. There's a photograph on the table I was meaning to describe to someone.
Caller I understand — we can keep this between us. If you let me in, I'll make sure it's all sorted before anyone else finds out.
Told to keep it secret

It creates a false sense of privacy to prevent the victim from seeking help or verification.

Real company: A real company would encourage the customer to consult with others or seek official help if needed.

Bernard I do trust you — I'm not sure I trust this. I'll have to speak to my son. He's the one who deals with things like this.
Caller I can wait — just let me know when he's available. We're happy to hold the refund until you're ready.
Remote access request
Bernard I'll have to find him — he's not usually around. I'll have to check the shed first. There's a letter I received this morning that might be relevant.
Caller I can wait — just let me know when you're ready. We're here to help.
Remote access request
Bernard I'll have to think — there's a photograph on the table I was meaning to describe. It's of my nephew, but I'm not sure if it's the right one.
Caller I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →