Call #289 · 2026-10-21

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A surprise bill that turns into a refund is bait, and a real one never comes with a request to keep it quiet.

“Bernard asked whether the money was owed to the caller or to him, and the post was suddenly the answer.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

refund reversed itself, no screen shared, caller signed off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                That's the thing, Bernard — there's a bill on your account for a subscription you never ordered, and it shouldn't be there. I've got the paperwork here and I just need to look at the account with you.
              
                  Fake invoice or refundUnsolicited contact
                
An invented charge creates alarm and a sense of debt, so the target focuses on fixing it rather than questioning the call.
Real company: A real company sends a written bill or statement and never resolves a disputed charge through an unexpected phone call.

                Bernard
                Well now, that's a worry, isn't it? Though I should say I've never been one for subscriptions. Hold on, the fire's gone a bit low — I'll just give it another shovel. What was the name of the firm again?
              
                Caller
                CloudHarbour Subscriptions, Bernard. And here's the part worth hearing — that bill wouldn't just vanish, it'd come back to you as a credit, so you'd actually end up a little ahead.
              
                  Greed or reward baitFake invoice or refund
                
Offering a bonus on top of a refund turns a worry into a windfall, so the listener stops checking and starts wanting it.
Real company: A real company refunds only what was wrongly charged, and never promises you extra money for cooperating.

                Bernard
                Ahead, you say? Well, I'm not sure I follow, but that's kind of you. Only my milkman's owed two pounds and I keep forgetting, so I'm not sure a credit would find its way to me. What day is it today — Thursday, isn't it?
              
                Caller
                It's only Wednesday, Bernard. And look, between us, I'd keep this refund business quiet — my supervisor doesn't like me handing these out, so it's better if it's just something you and I sort out.
              
                  Told to keep it secretFake invoice or refund
                
Asking for secrecy makes the target feel special and chosen, and cuts them off from anyone who might spot the scam.
Real company: A real refund is a normal transaction, handled openly by a named department and confirmed in writing.

                Bernard
                Wednesday, is it? Well, there we are — I'd have sworn it was Thursday, so I'd have been a day early for everything. You'll have to keep your voice up a touch, the fire's crackling. Now, this bill you mentioned?
              
                Caller
                Right, the bill — that's exactly it, and I can reverse it, but the refund's stuck until the account's looked at properly. If you'd just let me have a look at your screen, I can do that side of it from here.
              
                  Remote access requestFake invoice or refund
                
Offering to fix a problem he did not cause makes Bernard feel the loss is already real and only the caller can undo it.
Real company: A real company reverses a charge on its own systems and never needs to see your screen to do it.

                Bernard
                Oh, the screen — I wouldn't know where to begin with all that. My eyes aren't what they were. Look, you've been very good about this bill. Would you like a cup of tea while we sort it out? Or is it too late in the day for you for that sort of thing?
              
                Caller
                That's kind, but I can't stop — I'm not even supposed to be on this line this long, honestly. If it's easier, you don't have to do anything clever, I just need a quick look at the account.
              
                  Remote access requestUrgency or fear
                
It frames the request as a small favour while hinting at time pressure, so the target feels helpful rather than suspicious.
Real company: A real company never needs to look at your account through your device and will offer a callback through official channels.

                Bernard
                Well, you're welcome to a look, but you see, there isn't a bill here I can find, and I don't care for this talk of keeping it under your supervisor's nose. Is it you that's owed the money, or me?
              
                Caller
                I'll send it in the post instead. Save us both the trouble. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →