Call #404 · 2026-10-22

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A refund that requires letting a stranger into your account is not a refund.

“The caller needed to be inside the account and rang off when Bernard asked which way the money was going.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

money unclaimed, caller departed, nothing lost · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Mr Morley? It's Denny at CloudHarbour Subscriptions — I've got a bill here with your name on it for a yearly plan, and I'm fairly sure it's a mistake.
              
                  Fake invoice or refundUnsolicited contact
                
A surprise bill in your name creates instant worry, so you focus on fixing it rather than asking who is calling.
Real company: A real subscription company sends billing in writing and never cold-calls about a plan you did not set up.

                Bernard
                Denny, is it? Now then. Cloud... Cloud Harbour, you said. My niece works in a harbour office, up in the north somewhere. Is it the yearly one, or the other one? I've had a letter about something yearly, but it might have been the milkman's.
              
                Caller
                No, not that — the bill's been raised in your name, and I can put the charge back to you with a bit extra on top for the trouble. That's yours, it just needs releasing.
              
                  Greed or reward baitFake invoice or refund
                
Offering extra money for the trouble turns a worry into a reward, so the target focuses on the gain instead of checking the story.
Real company: A real company refunds only what was actually charged, to the account it came from, and never adds a bonus for inconvenience.

                Bernard
                Extra on top, you say. That's kind of you. Hold on a tick — the fire's burned right down and I said I'd see to it before I sat. Are you warm enough, wherever you're sat?
              
                Caller
                I shouldn't be talking about this to anyone else, that's the thing — this offer isn't supposed to be on the books, so it's just between us. You'll not mention it to anyone, will you?
              
                  Told to keep it secretFake invoice or refund
                
Swearing someone to secrecy isolates them, so no friend or family member can point out the obvious problem.
Real company: A real company never asks you to hide a refund or offer from your family or your bank.

                Bernard
                Oh, mum's the word, don't you worry. Though I'm not much of a one for secrets — I told the whole street about my surprise birthday and it wasn't until the Thursday I twigged. Is it the sort of thing I could tell my sister? She's in the north.
              
                Caller
                Best keep it to yourself, honestly — if the office gets wind of it I'd be the one in bother. Anyway, none of this gets sorted unless I can get into your account, so if you'd just let me have a look at it, we'll have the money back to you sharpish.
              
                  Told to keep it secretRemote access requestUrgency or fear
                
Isolating the person and pairing secrecy with a fast fix makes them feel complicit and rushed, so they stop checking.
Real company: A real bank or refund team never asks you to hide a case or hand over account access, and puts requests in writing.

                Bernard
                Have a look at it, right. I'd have to fetch my glasses, and they've gone wandering again. There's a paper somewhere with it on. Which company was it again? I don't want to ring the wrong people.
              
                Caller
                It's all in the email, the bill — I'm from the subscriptions side, that's where it's logged. Tell you what, I'll stay on while you fetch the paper, but I really do need inside that account before I can release anything.
              
                  Remote access requestFake invoice or refundUrgency or fear
                
                Bernard
                Oh — inside the account. Well, that's more my nephew's line of country, and he's away on a course. Tell me — is this money coming to me, or going from me? I get muddled with that.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →