Call #304 · 2026-10-21

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A real refund needs no screen access and no secrecy, and no genuine company will ask you to keep money quiet.

“Nothing was installed, nothing was paid, and the call went nowhere.”

Fake invoice or refundUrgency or fearGreed or reward baitTold to keep it secretRemote access request

credit unclaimed, screen never woken, caller rang off · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Ah, Mr. Bernard, is that you? It's about the bill you were sent — that subscription charge, the one for the account you never set up. There's a refund waiting on it, but the paperwork's stuck until someone looks at the account.
              
                  Fake invoice or refundUrgency or fear
                
It invents a charge the person never made, so the fear of losing money makes them eager to fix it fast.
Real company: A real company sends a written bill or refund notice you can check yourself in your own account.

                Bernard
                Oh — well — now, is that CloudHarbour or CloudHarbour? Only I read it twice and got in a muddle. Refund, you said. That's the nice sort of paperwork, isn't it. Mind you, I've had a jigsaw on the table since Easter and one piece still hasn't turned up.
              
                Caller
                CloudHarbour, that's the one, and yes — there's a credit sitting there with your name on it, more than the charge itself, as it happens. Missing pieces are a nuisance, I know, but this refund's the sort of thing you'd not want left lying about.
              
                  Greed or reward baitFake invoice or refund
                
A promised credit larger than the charge makes the target focus on easy money instead of checking whether the refund is real.
Real company: A real company refunds to the original payment method on its own and never dangles extra money to keep you on the line.

                Bernard
                More than the charge, you say. That's peculiar, that is. Ooh — hold on, the lid's gone tight on the tin again. Not the — the round one. Two ticks. Right. Sorry. Where were we? Cloud something. You'll have to say the name again, the line's a bit muffled this end.
              
                Caller
                CloudHarbour — though look, best not to mention this to anyone once it's sorted, all right? These adjustments are meant to be done quietly, and I'd not want word getting about and someone else claiming your credit.
              
                  Told to keep it secretFake invoice or refund
                
Secrecy cuts the victim off from anyone who would spot the scam, and a hint of competition makes them hurry.
Real company: A real company never asks you to keep a refund quiet, and it puts adjustments in writing.

                Bernard
                Quietly. Right you are. Though I don't know who I'd tell — the woman at the post office, perhaps, she's very good with forms. Oh, and the parrot would hear, but she repeats things badly anyway. Sorry, what was it you wanted me to look at?
              
                Caller
                The account, Mr. Bernard — it just needs a look, and then the money's on its way to you. If you'll let me have access to your screen for two minutes, I can put the paperwork right in front of you and we're done.
              
                  Remote access requestFake invoice or refund
                
It pairs a small, easy favour with the promise of money, so the screen sharing feels like a formality rather than a risk.
Real company: A real refund arrives on its own, and no legitimate firm needs to watch your screen to send it.

                Bernard
                Access. To the — the screen, you mean. Oh, that's the telly, is it, or the little one in the kitchen? There's two, you see. Hmm — my glasses. One moment, they're either on my head or they're not.
              
                Caller
                The computer, that's the one — the screen you're at now. Let me look at it and I'll point you straight to the spot, then we can wrap this up.
              
                  Remote access requestUrgency or fear
                
                Bernard
                Oh, the computer. It's not on, dear, it hasn't been on since the spring. Takes an age to warm up. I'd have to find the — the thing, with the lead on it. Would it wait till after lunch, do you think?
              
                Caller
                Honestly, I don't know why I bother. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →