Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #609 · 2026-10-24

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
7
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A credit that has to stay secret and needs someone let into your computer is not a credit, it is a hook.

“The caller said the money could not move until the account was opened, and Bernard said his was in the hall drawer.”

Fake invoice or refundUnsolicited contactUrgency or fearGreed or reward baitTold to keep it secretRemote access requestFake authority or brand impersonation

refund unreleased, drawer searched in vain, line dropped · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Hello, this is Priya from CloudHarbour Subscriptions — I've a bill in front of me here with your name on it, and I'd like to sort it out before it goes any further.
Fake invoice or refundUnsolicited contactUrgency or fear

A bill with your name on it creates instant worry, and the hint of consequences pushes people to engage before checking.

Real company: A real subscription service sends a written invoice or statement you can verify in your own account, not a cold call.

Bernard Oh — well — now, CloudHarbour, you said? I've got a letter here somewhere that mentions a harbour, I think. Tuesday's post, or was it Monday. Hold on, I'm just moving a stack of papers off the chair. What was the name again?
Caller CloudHarbour Subscriptions, that's right. And the part you'll want to hear is that once the account's looked at, there's a credit sitting there waiting to come back to you — it's yours, it just can't move until someone opens the account.
Greed or reward baitFake invoice or refundUnsolicited contact

A promised credit flips the call from a problem into a reward, so the listener leans in and wants the account opened.

Real company: A real subscription service refunds to the original payment method on its own and never ties a credit to opening your account.

Bernard A credit, you say. Well, that's very decent of somebody. Is it a large one, or just a few pounds? Only I had a refund once and it turned out to be a voucher for a shop I've never set foot in.
Caller It's well worth having, I can tell you that much. And I'd ask you to keep this between the two of us for now — the offer isn't supposed to be open to everyone, so it's best we don't have half the street ringing up about it.
Told to keep it secretGreed or reward bait

Secrecy makes the offer feel exclusive and stops the listener checking with anyone who might spot the problem.

Real company: A real company never asks you to hide an offer from family or friends, and puts terms in writing.

Bernard Keep it quiet, right you are. Mind you, I'm not sure who I'd tell — the neighbour on the left is away, and the one on the right's got a fence up. Would you like something warm while we do this? I was just about to put something on.
Caller No, no, I'm fine, thank you. Here's what we need — if you could just let me have a look at your account for a moment, I can release the refund right away, and there's nothing more for you to do after that.
Remote access requestFake invoice or refund

It pairs a reward with a simple request for access, so the target focuses on the refund and not on what they are handing over.

Real company: A real refund is processed on the company's own systems and never needs a look inside your account.

Bernard Have a look at it — well, it's in the drawer in the hall, I should think, on the paperwork pile. The thing is, it's Thursday today, isn't it. Or is it Wednesday. I always lose a day when the bins don't go out.
Caller It's Tuesday. And your account isn't in the drawer, it's on your computer — that's the only place I can reach it from here.
Remote access requestFake authority or brand impersonation

It reframes a request to reach into the computer as routine account work, so the listener focuses on the task rather than on who is asking.

Real company: A real bank or software firm never needs to reach into your computer to find your account, and will say so plainly.

Bernard Is that right. Well, the machine's in the back room, and it's been known to sit there sulking for a good ten minutes. Are you sure I can't get you a cup of something while it thinks about it?
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →