Call #2944 · 2026-11-13

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will ask you to install software to give you a refund.

“I've got a radio on in the kitchen. It's been playing all day.”

Fake invoice or refundGreed or reward baitRemote access requestTold to keep it secretUrgency or fear

caller left, no access given · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, I'm calling about the recent payment you made to CloudHarbour Subscriptions. We're offering a full refund if you can just let us check your account.
              
                  Fake invoice or refund
                
It creates a false sense of urgency to get the victim to act quickly without thinking
Real company: A real company would not offer a refund without first verifying the customer's identity

                Bernard
                Oh — I see. I didn't make a payment to CloudHarbour. I thought it was a mistake. I'll check my email again. Do you have a number for the bank? I need to call them. I'll be right back.
              
                Caller
                We can sort this quickly — just let me access your account and I'll process the refund immediately. There's no need to call the bank.
              
                  Greed or reward baitRemote access request
                
The promise of a quick refund lures the victim into giving up control
Real company: A real company would never ask for remote access to process a refund

                Bernard
                Oh — I don't know about that. I've got a bit of a mess on the back step. It needs painting before winter. I'm not sure I'd know how to let you in. I'll have to think about it.
              
                Caller
                I understand — but the refund is only available if we can confirm your details now. Just a quick check, and then it's all sorted.
              
                  Told to keep it secret
                
Creating a false sense of exclusivity to pressure the victim into compliance
Real company: Offer transparent processes and encourage the customer to ask questions

                Bernard
                Oh — my details? I'm not sure I'd trust a stranger with them. I'll have to check with my daughter. She's the one who handles the accounts. I'll call her now.
              
                Caller
                We can do this without your daughter — just let me guide you through the steps, and it'll be over in a minute. No one else needs to be involved.
              
                  Remote access request
                
                Bernard
                Oh — I don't think I'd know where to start. I've got a radio on in the kitchen. It's been playing all day. I'll have to listen to that for a while.
              
                Caller
                I'm sorry — but we need to move quickly. If you don't act now, the refund may not be available. Just let me help you.
              
                  Urgency or fearRemote access request
                
Creating a false sense of urgency pressures the victim into acting without thinking.
Real company: A real company would not pressure you to act immediately and would not ask for remote access.

                Bernard
                Oh — I don't think I'd know what to do. The back step is getting rather messy. I'll have to paint that before winter. It's been on my mind all day.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →