Bernard Doesn't Press That The Fraud Desk
Line quiet

Call #89 · 2026-10-19

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

15
Minutes wasted
6
Red flags found
10
Lines spoken
0
Scammer success
Call report

The Surprise Invoice and Refund

A surprise refund that needs remote access to your computer is not a refund, it is a request for your money.

“The refund stayed pending and the caller went quiet. Bernard offered tea instead.”

Unsolicited contactFake invoice or refundGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

nothing gained, tea declined · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

Caller Good afternoon, Bernard — it's Davina from CloudHarbour Subscriptions. I'm ringing about the bill that came through to your inbox this morning, the one for the annual plan.
Unsolicited contactFake invoice or refund

A named bill he might have missed makes him doubt his own memory and lean on the caller for details.

Real company: A real subscription service sends a written bill you can check in your own account, and does not cold-call about it.

Bernard Oh — hello, Davina. Cloud Harbour, you said? Funny name. Now — was that the email with the blue heading, or the one that looked a bit like a receipt? Only I've got my glasses here somewhere.
Caller The receipt one, yes, blue heading. And here's the good bit — because the plan was never activated, we can release the whole amount back to you.
Greed or reward bait

An unexpected refund flips the call from a problem into a windfall, which makes people eager to cooperate and stop questioning.

Real company: A real company refunds money to the original payment method on its own, without needing you on the phone.

Bernard Release it back? Well, that's very decent of you. Hang on, I've got them on my head. There we are. Mavis is giving me a look, she does that. What was the amount again?
Caller That's great news — it's the full annual amount, and there's a little extra goodwill on top for the inconvenience. Just between us, though, keep this quiet for now — we're not meant to be offering the goodwill part until the audit's done.
Told to keep it secretGreed or reward bait

The surprise bonus makes the listener want to comply, and the secrecy request stops them checking with anyone who might spot the scam.

Real company: A real company never asks you to hide a refund from family, colleagues or your own bank.

Bernard Quiet, right you are. I'm very good at quiet, I lived with my sister for years. Ooh — would you like a cup of tea? You sound like you've been on the phone all day.
Caller That's very kind. I'll be quick, though — to release it I just need to have a look at the account with you, so if you'd let me onto your computer for a moment we can get it moving.
Remote access requestFake invoice or refundUrgency or fear

Asking to 'have a look with you' sounds like helpful service, so the request to enter your computer feels like part of the refund rather than a risk.

Real company: A real company refunds money to the account it came from and never needs to see or control your computer.

Bernard Onto my computer — oh, that one's had a mind of its own since Tuesday. It keeps asking me to do updates. Do you know, it's ever so warm in here? Are you warm enough, wherever you're sitting?
Caller I'm fine, thank you. It's just the account page I need, nothing else — if you let me have a look, the refund goes through today.
Remote access requestFake invoice or refundUrgency or fear

Asking to look at the account feels small and helpful, and tying it to a same-day refund makes refusing seem like the customer's loss.

Real company: A real company never needs to look inside your device or account page to send a refund, and it does not set same-day deadlines.

Bernard Today. Well, that's quick. Hang on, my hearing aid's doing that whistle again — the left one. Say the name of the company once more for me?

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →