Call #94 · 2026-10-19

The Surprise Invoice and Refund

email · CloudHarbour Subscriptions · invented, like everything else here.

Minutes wasted

Red flags found

Lines spoken

Scammer success

Call report

The Surprise Invoice and Refund

No real company reverses a charge or pays a reward by asking for remote access to your computer, and no legitimate refund needs to be kept secret.

“Caller offered a secret goodwill payment, then asked for access to the machine. Bernard offered to phone back after a sit-down.”

Fake invoice or refundUnsolicited contactGreed or reward baitTold to keep it secretRemote access requestUrgency or fear

nothing gained, script exhausted, no access · scammer success: none

The call

Oldest line at the top. The note beside each caller line is the Fraud Desk.

                Caller
                Oh, hello there — sorry to bother you, it's just a quick call about that CloudHarbour bill that came through on the email. I'll be quick, it's just so we can get the charge reversed for you.
              
                  Fake invoice or refundUnsolicited contact
                
A surprise charge plus an offer to reverse it makes people focus on the money they might lose or gain, not on whether the call is real.
Real company: A real company does not phone out of the blue to reverse a charge. It sends a written bill you can check against your own account.

                Bernard
                Oh, the harbour people. Well now. You'll have to bear with me, I've got marmalade on my hands — I've been at the Seville oranges all morning and it's gone everywhere. Reversed, you say? Reversed how, is it coming back round again?
              
                Caller
                That's right, it comes straight back to you — and actually, because of the mix-up on our end, there's a little goodwill payment on top of the reversal. A reward, if you like, for your trouble.
              
                  Greed or reward bait
                
An unexpected bonus turns a problem into a windfall, so the target focuses on the reward instead of checking the story.
Real company: A real company refunds the exact amount owed and never adds a surprise bonus to smooth over an error.

                Bernard
                Goodwill, that's nice. Mind you, there's a funny thing — my milkman was here and I owe him two pounds, and I've forgotten twice now. Would the reward cover that, do you think? Or is it more of an in-the-post sort of thing?
              
                Caller
                It'd more than cover it, I'd have thought. Just between you and me, though, I'd keep this goodwill payment quiet — we're not really meant to be offering it, so best not to mention it to the milkman or anyone.
              
                  Told to keep it secretFake invoice or refund
                
Swearing someone to secrecy isolates them from the people who would spot the trick and stop it.
Real company: A real refund or goodwill payment comes with paperwork and never asks you to hide it from anyone.

                Bernard
                Keep it quiet, right you are. Though I don't know who I'd tell — Mavis the parrot's the only one in most days, and she's not much for money. She's a grey one. Do you keep birds at all?
              
                Caller
                No birds here, sadly — it's all paperwork. Which is actually the thing: I can't release the goodwill or the reversal until I've had a quick look at the account, so if you could just let me have access to your machine for a moment, I'll be in and out.
              
                  Remote access requestFake invoice or refundUrgency or fear
                
Offering money back and framing access as a quick formality makes handing over control feel routine rather than risky.
Real company: A real company never needs remote control of your computer to process a refund, and would send confirmation in writing instead.

                Bernard
                Oh, access. Right. Now — which machine, the little one in the kitchen or the one in the front room? Only I can't remember which one has the harbour on it. Is it in the biscuit tin, do you think?
              
                Caller
                The harbour one — CloudHarbour, that's the account, it'll be whichever machine you use for your emails. If you just let me have a look at that one, I can sort the whole thing out and you can forget all about it.
              
                  Remote access requestFake invoice or refund
                
Offering to fix the problem for you makes handing over control feel helpful rather than risky.
Real company: A real company resolves billing errors on its own side and never needs to look inside your computer.

                Bernard
                Oh, the harbour one, right you are. Hold on, let me think which one that is — my reading glasses are about somewhere but they won't help with that. The email machine, you said. Would it be all right if I phoned you after I've found it? Soon as I've had a sit-down.

What the pattern is

The invoice is bait, and there is no subscription and no charge. The point of the bill is to start a conversation in which the householder is alarmed, then relieved: money is coming back, if only they help. The "refund" needs a bank login or remote access, which is the real target. A genuine refund never requires either, and a real company never asks a customer to keep a refund quiet.

What to do instead

Check the account the bill claims to be from, by typing the address of the service you actually use, or ring the number on a statement you already have. If you never bought the thing, there is nothing to reverse. Never give a bank login or remote access to someone who rang you, and treat any request for secrecy as the end of the conversation.

The full scenario page →

Every call · Where to report a real one · ← previous · next →