Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #44 · 2026-10-18

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

15
Minutes wasted
7
Red flags found
10
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A real company never needs you to keep a refund secret or let them into your computer to release it.

“The credit stayed on the account. So did Bernard, who never did find his other glasses.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fearSupervisor hand-off

script exhausted, no access, marmalade unspoiled · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, is that Mr Bernard? It's Wanda from CloudHarbour Subscriptions — I'm afraid a bill went out to you by mistake this morning, and I'm ringing to sort the refund out.
Fake invoice or refundUnsolicited contact

A refund sounds like free money, so the target relaxes and cooperates instead of questioning why a stranger called.

Real company: A real company refunds to the original payment method automatically and confirms it in writing, not by phone out of the blue.

Bernard Oh — well — now. Wales Harbour, you said? I've got a nephew in Wales. Hang on, is that pronounced like the animal or like the country?
Caller CloudHarbour, like a harbour for clouds — and I'll be quick, because that bill isn't just a mistake, it means there's a credit sitting on your account with your name on it.
Greed or reward baitUnsolicited contact

A surprise credit is dangled so the listener focuses on money coming in rather than checking whether the call is real.

Real company: A real company sends a bill or refund notice in writing through your own account, not as a surprise over the phone.

Bernard A credit, you say. Well, that's nice. I've got a jar of marmalade on the go in the kitchen — I made it myself, Seville oranges — and I'm just wondering whether a credit needs feeding.
Caller No feeding required, I promise. And look — before we go any further, I'd keep this between the two of us, because I shouldn't really be releasing a credit like this and I'd hate to get in trouble over it.
Told to keep it secretGreed or reward bait

Asking for secrecy makes the target feel special and chosen, and cuts them off from anyone who would spot the trick.

Real company: A real company never asks you to hide a refund from family, colleagues or your own bank.

Bernard Between the two of us — right you are. Though the milkman's owed two pounds and he's the soul of discretion, so I might tell him. What was the name again? Clouds something?
Caller CloudHarbour, yes. Now the quickest way to release that refund is just to let me have a look at your account on the machine — if you can let me in, I'll pull the whole thing up and we'll be done before your marmalade sets.
Remote access requestFake invoice or refund

Offering to fix the problem for you feels helpful, and the friendly joke makes the request seem casual and safe.

Real company: A real company refunds to your original payment method and never needs to look inside your computer.

Bernard Let you in — well, the back door's open but it sticks a bit in the damp. Oh, you mean the computer. Sorry, the left ear's no good. Do you want a cup of tea while I think about it?
Caller Tea's very kind but I really can't stop — it's just the account I need to look at. If I can't get in, I'll never get this credit cleared and frankly my supervisor's already given me a look about it.
Remote access requestUrgency or fearSupervisor hand-off

It rushes the listener past the request for access by framing delay as a personal failure with a deadline.

Real company: A real bank or refunds team never needs to get into your device, and it gives you time to check the request yourself.

Bernard A look from the supervisor, that's never nice. Let me just get my glasses — no, hang on, that's the wrong pair, these are for the paper. What was it you needed to look at? The account, yes. Which account was that now?

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →