Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #469 · 2026-10-23

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
6
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A refund that must be kept secret and needs a look at your screen is not a refund, it is a request for access.

“The caller wanted a look at a screen, was offered a photograph to describe instead, and gave up on the refund.”

Fake invoice or refundUnsolicited contactRemote access requestGreed or reward baitTold to keep it secretUrgency or fear

offer lapsed, screen unshown, they rang off first · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller CloudHarbour Subscriptions here — I've sent through a bill for a yearly plan, and I think it's landed on the wrong desk entirely. If you'll let me look the account over, I can get the charge reversed.
Fake invoice or refundUnsolicited contactRemote access request

An unexpected charge creates alarm, and the offer to fix it makes the caller seem helpful rather than threatening.

Real company: A real subscription service points you to your own account page and never asks to look it over for you.

Bernard Cloudy what, sorry? Cloudy Harbour, is it. My neighbour's got a boat called something like that. Oh — the bill. Was it by post or did it come through the machine on the hall table? I only ask because I had a photo I wanted to tell you about.
Caller It came by email, that's the thing — and here's the good part, there's a refund sitting on the account that's bigger than the bill. Yours, if we can just get it looked at.
Greed or reward baitUnsolicited contact

A surprise refund flips the call from a problem into a windfall, so the listener leans in and wants the next step.

Real company: A real company states the amount owed or refunded in writing and never dangles extra money to keep you on the line.

Bernard Bigger than the bill — well, that's unusual, isn't it. Is it in colour, this email, or just plain? I've got my glasses somewhere but they've gone under the chair with my slipper. Hang on, let me have a feel about.
Caller Take your time. But I should mention — this refund is on the quiet side, so it's best kept between us until it's actually through and paid out.
Told to keep it secretFake invoice or refund

Asking for secrecy isolates the person from anyone who would spot the trick and stops them checking with family or the bank.

Real company: A real refund is routine and public. No genuine company asks you to hide it from the people around you.

Bernard On the quiet, right you are. I keep a lot of things quiet myself — the marmalade especially. Made it in January, or was it the year before. Kept it quiet from my sister, she'd only say it was too sharp.
Caller Fair enough. Now, to get that refund moving I'd need to look at the account with you — if you can let me have a look at your screen, I can push it through today.
Remote access requestFake invoice or refund
Bernard Look at my screen? Well, which one — the little one in the kitchen, or the one in the front room my nephew set up and never explained? Hold on, the kettle's just clicked.
Caller The little one's fine, any of them. Just let me have a look and I'll get that refund across before the offer lapses — it does lapse, these things do.
Remote access requestUrgency or fear

A deadline makes people act fast and skip the question of why a stranger needs to look at their device at all.

Real company: A real company refunds to the original payment method and never needs to look inside your computer to do it.

Bernard Lapse, you say. Well, give me a moment — there's a photograph here I've been wanting to describe. My father in the yard, the year the fence went, and he's got a hat on that wasn't his.
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →