Call #579 · 2026-10-24

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

A surprise refund that must be kept secret and needs remote access is a trap, not a windfall.

“He said the goodwill credit was released on the quiet, and Bernard said he was not much of a one for telling things.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

credit promised, cover kept, caller hung up · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Good morning, it's CloudHarbour Subscriptions here — I'm looking at a bill that went out to you for rather a lot, and I'd like to get it reversed. Did that email land in your inbox at all?
              
                  Fake invoice or refundUnsolicited contact
                
Naming a charge you never made sparks worry about money leaving, so you engage to check.
Real company: A real subscription service emails a receipt you can verify by logging into your own account.

                Bernard
                Oh — CloudHarbour, you say? I've got a cousin in the subscription line, or was it insurance — Derek, it's Derek. Now, email. I did see something with a lot of numbers on it, but I thought it was the gas.
              
                Caller
                That's the one — a lot of numbers, yes. Now, here's the good part: when an unauthorised charge goes through, we don't just reverse it, we add a goodwill credit on top. So you'd actually come out ahead.
              
                  Greed or reward bait
                
The promise of coming out ahead turns a worry about loss into a chance to gain, which makes people eager to stay on the line.
Real company: A real bank reverses the charge it can verify and never offers a bonus for cooperating over the phone.

                Bernard
                Well, that's very decent of you. Derek always said there was no such thing as a free lunch, mind — though he sold insurance, so he would say that. Ahead, you say? How much ahead, roughly?
              
                Caller
                Somewhere in the region of a decent little sum — I haven't got the exact figure in front of me. But I ought to mention, this goodwill credit is only released on the quiet, so best not to mention it to anyone else while it's going through.
              
                  Told to keep it secretGreed or reward bait
                
Secrecy stops the listener from checking with anyone who would spot the trick, and the vague reward keeps hope alive.
Real company: A real company puts refunds in writing and never asks you to hide them from family or staff.

                Bernard
                On the quiet? Well, I'm not much of a one for telling people things, truth be told. There's nobody here but me and — oh, what's that bird doing now. Hold on a moment, would you?
              
                Caller
                No rush at all. When you're back, the only thing left is for me to have a look at the account alongside you — just let me onto your machine and I can pull the refund through.
              
                  Remote access requestFake invoice or refund
                
Asking to be let onto the machine sounds like routine help, so the target lowers their guard and hands over control.
Real company: A real company never needs remote control of your computer to process a refund, and would send confirmation in writing instead.

                Bernard
                Right, I'm back. Sorry, she'd got herself wedged behind the curtain rail. Now — you want to look at the account along with me. Ah, that's the snag, you see. My machine, as you call it, sits under a doily and I've never been too sure what it does.
              
                Caller
                Under a — no, that's alright, we can work around the cover. It's really just a case of me guiding you through it while you sit at the screen. Shall we start?
              
                  Remote access requestUrgency or fear
                
Offering to guide someone at their own screen feels helpful and collaborative, so the person lowers their guard and follows along.
Real company: A real bank or software firm never walks you through your own screen to fix a refund, and will tell you to call the number on your card.

                Bernard
                Oh — well — now. You'd be guiding me, would you. It's just that I promised a cousin of mine I'd not go poking about under that cloth, and he was very firm about it.
              
                Caller
                Forget it. I'm putting the phone down now.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →