Call #3259 · 2026-11-14

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company will ask you to give them remote access to your account for a refund or upgrade.

“I'll let you get back to your afternoon. Goodbye.”

Fake invoice or refundGreed or reward baitTold to keep it secretRemote access request

caller left, no access granted · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Hello, Mr. Bernard? This is CloudHarbour Subscriptions. We've received a payment for a service you didn't sign up for — and we'd like to put it right.
              
                  Fake invoice or refund
                
It creates a false sense of urgency to get the victim to act quickly without thinking
Real company: Contact the customer directly through verified channels and offer a clear resolution process

                Bernard
                Hello? Oh — I'm sorry — I was just looking at the jigsaw. Yes, CloudHarbour? I don't remember signing up for anything. But that's all right — I rather like the idea of a subscription. Do you have a green one?
              
                Caller
                That's exactly what we're here for — we're offering a special deal, just for you. A free upgrade to a premium subscription, with all the extras.
              
                  Greed or reward bait
                
It exploits the desire for free upgrades to lower defenses and encourage action.
Real company: A legitimate company would not offer unexpected free upgrades without prior communication.

                Bernard
                Oh, a premium one? That sounds splendid. I do so enjoy the extras. But I do hope it comes in blue — I rather like the colour.
              
                Caller
                We can arrange that, Mr. Bernard. But first, we need to confirm your details. Just a moment — I'll be quick.
              
                  Told to keep it secret
                
It creates a false sense of privacy to prevent the victim from seeking help
Real company: A real company would encourage the customer to verify the request with official channels

                Bernard
                I'll need to check the paperwork — I left it by the door. Do you know, I've been meaning to get a new one for ages.
              
                Caller
                I can help with that. If you just let me have a look at it remotely, we can sort everything out in no time.
              
                  Remote access request
                
It bypasses security and lets the scammer control the device
Real company: Offer help over the phone without requesting remote access

                Bernard
                Oh, remotely? I do so hate that. But — I was just thinking — do you know, I had a look around yesterday, and I've still got one piece missing. I rather think it's in the garden somewhere.
              
                Caller
                That's a shame. But we can still proceed — I just need access to your account to process the upgrade.
              
                  Remote access request
                
                Bernard
                Oh, an upgrade? I do so like the sound of that. But — I do wonder if it comes in blue. I rather think the garden would prefer it.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →