Call #344 · 2026-10-21

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A refund that requires someone to look at your computer is not a refund, and the real rule is that you never have to let a stranger onto your machine.

“The caller offered a goodwill credit and asked to be let onto the machine, and Bernard asked whether the caller got any supper.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

credit offered, access withheld, nothing moved · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good afternoon, it's CloudHarbour Subscriptions here about the bill that came through to your inbox this morning. I can get that charge reversed for you, but I'll need to look at the account with you first.
              
                  Fake invoice or refundUnsolicited contact
                
A bill you don't remember invites panic, and the offer to reverse it makes the caller feel like help rather than a threat.
Real company: A real subscription service points you to your own account page and never reverses charges over the phone.

                Bernard
                CloudHarbour, you say — I've got it written down as CloudHarbour, is that right? Only I've been through the whole inbox twice and the only thing in there is something from the garden centre. Oh — hold on, that's Thursday, isn't it. Is it Thursday?
              
                Caller
                CloudHarbour, that's right, yes. And it's not just the reverse of the charge — there's a goodwill credit on the account as well, so you'd actually come out ahead.
              
                  Greed or reward baitFake invoice or refund
                
An unexpected bonus makes the target want to cooperate quickly before the good news slips away.
Real company: A real company refunds exactly what was charged and puts any credit in writing, not as a verbal sweetener.

                Bernard
                Come out ahead, you say. Well, that's decent of somebody. Hang on, I've got my glasses somewhere — no, they're on my head, aren't they. Now, this credit, does it come as a cheque or does it want feeding?
              
                Caller
                A cheque, a proper cheque, none of your feeding. But I should mention, this goodwill arrangement is between us, so it's best not kept quiet — I mean it *is* kept quiet. Not a word to anyone else.
              
                  Told to keep it secret
                
Asking for secrecy cuts the listener off from the people who would spot the trick in seconds.
Real company: A real refund or goodwill payment is documented and never comes with a gag order.

                Bernard
                Kept quiet. Right you are. I don't say much to anyone these days except the bird. Oh — but you'd like the wrong day of the week, wouldn't you. It's Monday. No, Wednesday. It's Wednesday, I'm sure of it.
              
                Caller
                Wednesday, right you are. Now, the refund can't go through from my side, so I'd need to have a look at your machine with you — just let me onto it for a moment.
              
                  Remote access requestFake invoice or refund
                
Asking to 'just have a look' sounds like routine help, so the target lowers their guard and hands over control.
Real company: A real company never needs to take control of your computer to send a refund, and refunds go back to the original payment method.

                Bernard
                Onto the machine, is it? Oh — well — now. The kettle's just gone off, you see, it's a noisy old thing. Give me a moment, would you, and tell me again while I get a cup going. Do you take one?
              
                Caller
                That's kind, but I can't stop — I've got a list here and you're the last one on it. It's just the account I need a look at, and then the paperwork's done.
              
                  Remote access requestUrgency or fear
                
Framing it as a quick final task makes the request feel routine and small, so the target drops their guard.
Real company: A real company never needs to look inside your account or device, and will happily let you call back on a number you look up yourself.

                Bernard
                Last on the list, are you. Oh, that's a long day for you. Do you get anything to eat on a day like this, or is it all list and no supper?
              
                Caller
                I'll get someone else to ring you. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →