Call #424 · 2026-10-22

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A real refund never needs a stranger let into your account, and a secret refund is not a refund.

“The caller said the refund needed a small thing set up on the machine, and Bernard said the machine was very particular.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

reward unclaimed, setup refused, caller folded first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Oh — hello there. It's about that bill, the one that came through this morning for a subscription you didn't order. I'm calling from CloudHarbour Subscriptions to get the charge reversed for you.
              
                  Fake invoice or refundUnsolicited contact
                
A surprise charge you never made sparks alarm, and the offer to fix it makes the caller feel helpful rather than threatening.
Real company: A real subscription service would show the charge in your account and let you dispute it in writing, not phone you out of the blue.

                Bernard
                CloudHarbour, you say — now is that the one with the lighthouse on the letterhead? Only I had a letter this morning and I've put it somewhere sensible, which is the trouble. Hold on, my glasses are... oh, they're up here already, aren't they.
              
                Caller
                That's the one, the lighthouse, yes. And here's the good part — we're not just reversing that charge, there's a reward credit attached to it for the inconvenience. So there's a bit more coming back to you than went out.
              
                  Greed or reward bait
                
An unexpected bonus makes the target focus on the gain and stop questioning whether the charge was real.
Real company: A real company refunds exactly what was charged and explains any extra credit in writing.

                Bernard
                Well that's very decent of you. More coming back than went out — I'll have to write that on the calendar. Now, this paperwork, does it want signing in ink or is it the other sort? Only my pen's gone wandering.
              
                Caller
                Ink's fine, ink's fine. But before any of that — I should say this is rather a private arrangement at our end, so it's best kept between the two of us for now. No need to mention it to anyone else just yet.
              
                  Told to keep it secret
                
Asking for secrecy isolates the person from anyone who would spot the scam and stops them checking with family or staff.
Real company: A real supplier never asks you to hide a transaction, and their paperwork stands up to anyone reading it.

                Bernard
                Between the two of us, right you are. Mind you, I don't know who I'd tell — the postman's not much for news and the woman at the post office is run off her feet. Is that a noise at your end or mine?
              
                Caller
                That's just the office, ignore it. Look — the reason I need you is the refund can't be released from my side alone. If you just let me have a look at the account, I can push it through while we're talking.
              
                  Remote access requestFake invoice or refundUrgency or fear
                
Offering to fix the problem personally while the victim watches makes the request feel helpful and time-limited.
Real company: A real company never needs to look inside your account to send you money, and refunds arrive without anyone logging in.

                Bernard
                Let you have a look — well, that does sound efficient. Now which account is it, the household one or the other one? I keep them in separate drawers, you see, and I've never been sure why.
              
                Caller
                The one tied to the bill, that's the one. And to look at it I'd need you to let me in from your end — there's a small thing to set up on your machine, and then I can see the whole picture.
              
                  Remote access requestFake invoice or refund
                
                Bernard
                Set up a thing on the machine. Oh — hang on, that'll be the reading glasses. They're on my head, aren't they. Yes. I'm not sure the machine takes to setting up, it's very particular.
              
                Caller
                Right. I'll let you get back to your afternoon. Goodbye.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →