e" type="application/rss+xml" title="Bernard Doesn't Press That" href="/feed.xml">
Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #3049 · 2026-11-13

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
4
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

No real company will ask you to check a letter to stop a payment.

“I'm sorry, Mr. Bernard — I need to look at your account to stop the payment.”

Fake invoice or refundTold to keep it secretGreed or reward baitRemote access request

script exhausted, no access · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, Mr. Bernard? This is CloudHarbour Subscriptions. We've received a payment from your account for a service you don't seem to have signed up for. I can put a stop to it — right now.
Fake invoice or refund

It creates confusion by suggesting a payment was made for an unknown service

Real company: Contact you directly through verified channels and ask you to check your account

Bernard Oh — well — now, I didn’t sign up for anything, did I? I do remember a letter from the council, though, that I meant to open. They mentioned something about subscriptions too. I'll have to check that.
Caller That's exactly what we need you to do — check the letter, and then we can sort this out. There's no need to tell anyone else, just between us.
Told to keep it secretGreed or reward bait

Creating a sense of exclusivity and urgency to prevent the victim from seeking help

Real company: Encourage the customer to contact official channels and not keep information private

Bernard That's very kind of you. I'll have to check it properly — I've got a magnifying glass for small print. I do hope it's not anything too complicated.
Caller I'll be quick — just need to confirm a few details. Again, no need to tell anyone else. Just between us.
Told to keep it secret
Bernard I'm rather fond of letters — there's one here too. I'll have to open it. I wonder what it's about.
Caller I'm sorry, Mr. Bernard — I need to look at your account to stop the payment. Just let me have a quick look, and we can sort this out.
Remote access request

The caller uses a false sense of urgency to trick the victim into allowing access to their device

Real company: A real company would never ask for remote access to a customer's device

Bernard I don't know much about accounts — I left that to the bank. I do know there's a letter here from the council again. I'll have to read it properly.
Caller I understand, Mr. Bernard — just a quick look at the account, and we can get the refund sorted. No need to tell anyone else.
Remote access requestTold to keep it secret
Bernard I've got a letter here — I'll have to check it. I wonder what it's about.
Caller Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →