Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #749 · 2026-10-26

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

In real life: hang up. Nobody in this call can be followed as instructions. If a stranger rings and wants access to your computer, put the phone down and read the Help page, which is the part that is true.

15
Minutes wasted
5
Red flags found
11
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A refund that comes with a rule to keep it secret is not a refund, it is a way in.

“The caller asked to look at the account, Bernard asked about the coal fire, and the refund stayed where it was.”

Fake invoice or refundUrgency or fearGreed or reward baitTold to keep it secretRemote access request

refund unclaimed, caller lost the room · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good evening, it's CloudHarbour Subscriptions here — I don't suppose you've had a chance to glance at your email this evening? There's a bill sitting in it that we'd rather sort out before it gets any further.
Fake invoice or refundUrgency or fear

An unexpected bill creates worry, so people act fast to avoid a charge they never agreed to.

Real company: A real subscription service sends a written bill and lets you check it in your own account, in your own time.

Bernard Evening to you. CloudHarbour, you said? I knew a fella who kept boats at a harbour, but that's by the by. No, I haven't looked at the emails — I was half-listening to a play on the radio and the fire needed another shovel. What's this bill for, then?
Caller It's for one of our annual plans, and here's the good part — when we reverse a charge like this, there's a refund that comes with it that's a bit more than you paid. So it's worth us getting this looked at properly.
Greed or reward baitFake invoice or refund

Offering money back that is more than was paid turns a worry into a tempting gain, so the person leans in instead of hanging up.

Real company: A real company refunds the exact amount charged and never promises extra money as a reward for cooperating.

Bernard More than I paid? Well now, that's an odd way of doing business. Hold on — is this the telly licence or something else? Because I had a letter about that and I've never worked out which year it's for.
Caller No, nothing to do with the licence, this is purely CloudHarbour, and I should mention the refund's a bit of a private arrangement — we'd ask you keep it between us rather than talk it about, as it's not something we'd usually offer.
Told to keep it secretFake invoice or refund

Asking for secrecy isolates the person, so no friend or family member can point out how odd the offer sounds.

Real company: A real company never asks you to hide a refund from anyone, and it puts offers in writing you can share.

Bernard Keep it to myself, you say. Hm. That's the bit I don't follow — my neighbour Doreen does my post with me on a Tuesday, she'd spot a thing like that. Is it the radio play you mean, or the harbour business?
Caller Don't worry about Doreen for now — the thing is, none of it can happen until someone's actually had a look at the account. If you just let me have a look at your machine, that's the piece that has to come first.
Remote access requestUrgency or fear

It makes access to your device sound like a harmless first step, so the real goal slips past while you focus on the problem.

Real company: A real bank never needs to look inside your computer to fix an account, and would tell you to visit a branch or use the official app.

Bernard Have a look at my machine? It's a coal fire, not a mechanical thing, and I'm not sure you'd get much of a view over the telephone. Oh — you mean the telly and that. No, I'd have to find where I put the booklet.
Caller Not the machine in that sense — sorry, I'm muddling myself now. If you'd just let me look at the account on your computer, the refund releases straight after, and then you're done with all of it.
Remote access requestFake invoice or refund
Bernard Oh, the computer. That'd be the one in the back room doing nothing. I haven't the foggiest what to do with it, mind. Hang on, that's my programme starting — was you wanting something?
Caller I'll try again when the line's behaving. Good afternoon.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →