Auto Loan Adverse Action Notice: What It Means

Fake Refund Scam: How It Works

A message says you are owed a refund for a subscription, online purchase, technical-support plan, recalled product or earlier scam loss. The person offering the money may know your name, the company you use or details about a previous transaction.

Then the supposed refund becomes an emergency. The caller claims too much money was deposited, asks you to return the difference or says you must pay a fee before receiving your refund. You may be instructed to install remote-access software, log in to online banking, buy gift cards, send cryptocurrency or move money through a wire or payment app.

That is a fake refund scam. A legitimate company does not need remote control of your computer, a gift-card payment or a separate transfer to issue a refund.

On This Page
Fake Refund Scam

Quick Answer

A refund should put money back through a verified company and payment channel. It should not require you to send money, buy gift cards, transfer cryptocurrency, mail cash or provide remote access to your device.

Stop immediately when someone offering a refund asks you to:

  • Install remote-access or screen-sharing software
  • Log in to online banking while they watch
  • Share a verification code
  • Pay a processing fee or tax
  • Return an accidental overpayment through another payment method
  • Buy gift cards and provide the card numbers
  • Send a wire, cryptocurrency or payment-app transfer
  • Withdraw cash or obtain a cashier’s check
  • Keep the transaction secret from your bank or family

End the communication and verify the refund independently. Open the company’s official app or website, use the number printed on your card or statement, or contact the merchant through information you already know is genuine.

What Is a Fake Refund Scam?

A fake refund scam uses the promise of money coming back to persuade you to send money, surrender account access or provide personal information.

The scammer may pretend to represent:

  • An online retailer
  • A technology or antivirus company
  • A subscription service
  • Your bank or payment provider
  • A government agency
  • A law firm or consumer organization
  • A company that previously charged you
  • A recovery service for scam victims

The promised refund may supposedly concern:

  • An automatic subscription renewal
  • A recalled or defective product
  • A canceled order
  • A duplicate charge
  • A technical-support plan
  • An overpayment
  • A government enforcement case
  • Money lost in an earlier scam

The refund is the bait. The scammer’s actual goal is to obtain money, banking credentials, remote access or identity information.

How the Fake Refund Scam Works

You receive an unexpected refund offer

The contact may arrive through a telephone call, text, email, social-media message, computer pop-up or mailed letter.

The scammer creates urgency

You may be told that a subscription renewed, the refund expires today or your account will be charged unless you act immediately.

You are directed to a false support channel

The message provides a telephone number, link or representative who supposedly handles cancellations and refunds.

The scammer requests access or information

You may be asked to install software, open online banking, enter card details or share a security code.

A false refund appears

The scammer claims to deposit money or manipulates what appears on your screen to make it look as though your balance increased.

The scammer claims there was a mistake

You are told that $5,000 was refunded instead of $500, or that another incorrect amount was transferred.

You are pressured to return the difference

The scammer demands gift cards, a wire, cryptocurrency, cash, a cashier’s check or a payment-app transfer.

The original refund never existed. Any money you send comes from your own bank account, available credit or a fake check that will later be reversed.

Common Fake Refund Scam Versions

Scam version Refund story Scammer’s goal
Tech support refund A computer-support company is closing or refunding an old plan. Remote access and an over-refund repayment
Fake subscription renewal You were charged for antivirus, device protection or another subscription. Get you to call fake support
Merchant refund text A product was recalled or failed a quality inspection. Steal payment or identity information through a phishing page
Refund recovery service An agent can recover money lost in an earlier scam. Collect an upfront fee or obtain financial information
Fake check refund A check includes more than the refund owed. Make you return money before the check is rejected
Government refund The FTC, IRS or another agency is holding money for you. Collect fees or sensitive information

Tech Support Over-Refund Scam

This version may begin with a call or message claiming that:

  • Your technical-support company is closing.
  • You are entitled to a refund for an old support plan.
  • An antivirus or security subscription renewed automatically.
  • A computer service was charged to your account.
  • The company must cancel a pending renewal immediately.

The scammer asks you to install remote-access software and log in to online banking to receive the refund.

After gaining access, the person claims that a typing error caused an excessive refund. For example, the scammer may say that you were supposed to receive $300 but received $3,000.

You are then pressured to return the difference through:

  • Gift cards
  • A bank wire
  • A cashier’s check
  • Cash shipped in a package
  • Cryptocurrency
  • A payment app

No legitimate technical-support provider needs remote control of your computer or access to your online banking account to issue a refund.

Fake Subscription Renewal Refund

You may receive an invoice saying that hundreds of dollars will be charged for:

  • Antivirus software
  • Device protection
  • Technical support
  • Cloud storage
  • A streaming subscription
  • An online retail membership

The message says to call immediately if you did not authorize the renewal.

Before calling:

  • Check whether the charge actually appears in your account.
  • Open the company’s official app or website independently.
  • Review the subscription through your account settings.
  • Do not use the telephone number in the unexpected invoice.

A fake invoice does not prove that a charge occurred. The scammer wants you to call before checking your real account.

For a genuine subscription problem, see:

Fake Merchant Refund Text or Email

A message may claim that:

  • An online purchase was recalled.
  • A product failed a safety or quality inspection.
  • A delivery was damaged.
  • An order was canceled.
  • You qualify for a full refund without returning the item.

The message includes a link to claim the refund.

The linked page may request:

  • Your retailer username and password
  • Your complete card number
  • Your bank-account information
  • Your Social Security number
  • A security code
  • A small processing payment

Do not click the refund link. Open the retailer’s official app or type its known website address yourself and check the order directly.

Refund and Recovery Scam

This scam targets people who previously lost money.

The caller may know:

  • The type of scam
  • The company or website involved
  • The amount you lost
  • Your name and contact information
  • Whether you reported the incident

The person may claim to represent:

  • A law firm
  • A government refund department
  • A consumer advocacy organization
  • A private investigator
  • A cryptocurrency recovery service
  • A chargeback specialist

Before releasing the supposed recovery, the person demands:

  • A retainer
  • A processing fee
  • A tax
  • A bond or insurance payment
  • A cryptocurrency tracing fee
  • Bank or identity information

Do not pay an unexpected person who guarantees recovery of money lost in a scam. Fraud victims are frequently targeted again because the scammer already knows they want their money back.

Fake Check Refund Scam

A scammer may mail or electronically send a check that supposedly represents:

  • A refund
  • A rebate
  • A settlement payment
  • A returned deposit
  • An overpayment correction
  • Recovered scam proceeds

The check is for more than you expected. The sender tells you to deposit it, keep the amount you are owed and return the difference.

The check may initially appear in your available balance. That does not prove it is valid. Banks commonly make deposited funds available before the check has been fully verified.

Never send part of a check back to the sender or another person. When the check is later rejected, the bank can remove the deposited amount and you may still be responsible for the money you sent.

Government Refund Impersonation

A scammer may claim to be from:

  • The Federal Trade Commission
  • The Internal Revenue Service
  • The Treasury Department
  • A state attorney general
  • A consumer-protection agency
  • A court-appointed refund administrator

The message may include:

  • A fake case number
  • A badge or employee identification image
  • The name of a real government employee
  • An official-looking seal
  • A supposed refund certificate

The person then asks for money, banking information, identity documents or remote access.

A legitimate government refund does not require gift cards, cryptocurrency, a recovery fee or remote control of your device.

Verify FTC refund programs through:

FTC Refund Programs

Fake Tax Refund Message

A text or email may say that your federal or state tax refund:

  • Was approved
  • Cannot be delivered
  • Needs identity verification
  • Requires updated direct-deposit information
  • Will expire unless you respond

The link may steal:

  • Your Social Security number
  • Your date of birth
  • Your bank-account details
  • Your tax-filing information
  • Your online-account credentials

Do not use a link in an unexpected tax-refund message. Check a federal refund through the IRS’s official tools and a state refund through the official state tax agency.

Why Scammers Want Remote Access

Remote-access software can allow another person to:

  • See your screen
  • Move the mouse and type
  • Watch you enter passwords
  • View bank and investment balances
  • Read email and security messages
  • Download personal documents
  • Add payment recipients
  • Move money between your accounts
  • Alter what appears on the screen
  • Install additional software

The scammer may tell you not to move the mouse or look at the screen while the refund is processed.

Never open online banking while an unknown person has remote access to your computer or telephone.

How the Fake Bank Balance Trick Works

The scammer may make it appear that your account received money by:

  • Manipulating what is displayed in the browser
  • Moving your own money from savings to checking
  • Using money from a credit line or cash advance
  • Hiding transactions while sharing the screen
  • Showing a fake banking page
  • Claiming an unrelated deposit is the refund

The person may prevent you from refreshing the page, logging out or independently contacting the bank.

A number shown on a remotely controlled screen is not proof of a completed refund. End remote access and verify the transaction from another trusted device through your bank’s official service.

The Accidental Overpayment Story

The scammer may become emotional and claim that:

  • They will lose their job.
  • The company will deduct the money from their salary.
  • The refund department cannot reverse the error.
  • You could be accused of theft if you keep the excess.
  • The bank cannot be contacted because the transaction is confidential.
  • You must return the money before the end of the day.

This story is designed to make you feel guilty, frightened or responsible for correcting the scammer’s supposed mistake.

A genuine company can work with its bank and payment processor to correct an erroneous refund. It does not need you to buy gift cards, mail cash or transfer money to an employee.

How Scammers Ask You to Return the Money

Requested payment What the scammer may say Why it is dangerous
Gift cards The cards will quickly correct the company’s accounting. The card numbers can be redeemed immediately.
Wire transfer The refund department needs the difference returned. Wires can be difficult to reverse after receipt.
Payment app Send the money to the manager or refund agent. The payment goes directly to the scammer or money mule.
Cryptocurrency A secure digital payment is required. Transfers are difficult to reverse and may quickly move between wallets.
Cash or cashier’s check Mail the money to the accounting office. The package may be collected by a money mule.
Bank transfer Move the excess into a company reimbursement account. The destination is controlled by the scammer.

No refund process requires you to buy gift cards or cryptocurrency.

Fake Refund Warning Signs

  • The refund offer was unexpected.
  • The message includes an urgent telephone number or link.
  • No matching charge appears in your real account.
  • The caller asks for remote access.
  • You must log in to online banking while the caller watches.
  • The caller asks for a one-time security code.
  • The refund requires a fee or tax.
  • The refund is supposedly much larger than expected.
  • You are asked to return money using a different payment method.
  • The caller demands gift cards, cryptocurrency, cash or a wire.
  • The caller asks you to lie to bank or store employees.
  • You are instructed to stay on the telephone.
  • You are warned not to contact family members.
  • The caller refuses to provide written information through the official company account.
  • The person guarantees recovery of money lost in a previous scam.

How a Real Refund Normally Works

A legitimate refund normally returns money:

  • To the original payment card
  • To the payment account used for the purchase
  • As store credit under a disclosed policy
  • By a check issued through a verified company process
  • Through an official payment-platform dispute or refund system

A real merchant may ask you to:

  • Verify the order number
  • Confirm your name and account email
  • Confirm the payment card’s last four digits
  • Return the merchandise
  • Complete the request inside the official account

A legitimate merchant should not require you to:

  • Pay to receive the refund
  • Provide remote access
  • Purchase gift cards
  • Send money to an employee
  • Transfer an over-refund to an unrelated account
  • Share your banking password or security code

How to Verify a Refund Offer

Do not use the supplied contact information

Do not click the message link or call the number in the unexpected email, text or pop-up.

Check the original account

Open the merchant’s official app or website and review orders, subscriptions and messages.

Check the actual payment account

Determine whether the original charge and supposed refund are real, pending or posted.

Contact the merchant independently

Use a verified telephone number, account portal or receipt.

Ask for written details

Request the refund amount, processing date, destination payment method and transaction reference.

A real refund that has already been processed should have a traceable merchant or payment reference. For missing legitimate credits, use the merchant and bank tracing process rather than paying anyone.

Related guides:

What if a Real Company Over-Refunded You?

Do not send money to a caller, employee or unfamiliar account.

Instead:

  • End the unexpected call.
  • Contact the company through its official customer-service channel.
  • Verify that the refund actually posted.
  • Contact your bank through the number on your card or statement.
  • Ask the merchant to reverse or correct the original transaction through its payment processor.
  • Request written instructions and a case number.
  • Do not use gift cards, cryptocurrency or cash.
  • Do not send the money to a different company or individual.

A real accounting error should be corrected through the same verified merchant and banking system—not through a personal repayment demanded during an unexpected call.

What to Do While the Scam Is Happening

When you realize the refund may be fake:

  • Stop communicating.
  • Do not argue with the caller.
  • Do not send a test payment.
  • Do not enter another security code.
  • Disconnect remote access.
  • Disconnect the device from the internet when necessary.
  • Contact the bank from another trusted device.
  • Tell a trusted person what happened.
  • Preserve the message and payment instructions.

If you are already inside a store buying gift cards:

  • Stop before completing the purchase.
  • Tell the employee that someone instructed you to buy the cards for a refund.
  • End the call.
  • Contact the real company and bank independently.

What to Do if You Already Paid

Act immediately. Recovery is not guaranteed, but the payment provider may be able to stop or freeze money that has not yet been redeemed, withdrawn or transferred again.

Contact the payment provider

Report that the transfer, card, wire, check or cryptocurrency payment resulted from a fake refund scam.

Request recovery

Ask for a cancellation, reversal, recall, recipient freeze or package interception.

Contact your bank

Report remote access, stolen credentials and every unauthorized transaction separately.

Secure your accounts

Change compromised passwords from a trusted device and remove unknown access.

Report the scam

Submit reports to the FTC and FBI IC3 and preserve the confirmation numbers.

Watch for additional fraud

Review bank, credit-card, email, investment and credit-report activity.

See:

What to Do After Sending Money to a Scammer

Recovery Steps by Payment Method

Payment method Immediate action
Credit or debit card Contact the issuer, report the fraudulent transaction and request reversal.
Bank wire Ask the sending bank to recall the wire and contact the receiving institution.
Zelle or payment app Report through the bank and app and request a recipient-account freeze.
Gift card Contact the card issuer, report scam use and preserve the card and receipt.
Cryptocurrency Contact the exchange or platform and provide the wallet address and transaction hash.
Cashier’s check Contact the issuing bank immediately and ask whether payment can be stopped.
Cash shipment Contact the carrier or U.S. Postal Inspection Service and request interception.
Fake check deposited Tell the bank immediately and do not spend or return any of the displayed funds.

For payment-app recovery, see:

Zelle or Payment App Scam: Can You Get Your Money Back?

What if the Scammer Accessed Your Bank Account?

Contact the bank’s fraud department from a trusted device and ask it to:

  • Disable compromised online access
  • Remove unknown devices
  • Remove unfamiliar recipients
  • Reset security credentials
  • Review contact-information changes
  • Stop pending transfers
  • Recall completed transfers when possible
  • Replace compromised cards
  • Consider changing the bank-account number
  • Investigate every unauthorized transaction

Identify each transaction separately. The scam may include a payment you personally sent and additional transfers the scammer initiated after entering the account.

Authorized Payment vs Unauthorized Transfer

Scam-induced payment Unauthorized transfer
You entered and approved the payment after being deceived. The scammer initiated the transfer without your actual authority.
The bank may classify it as an authorized transaction. Regulation E error-resolution rights may apply to a qualifying electronic fund transfer.
Recovery may depend on the payment provider’s scam policies. The financial institution must investigate a properly reported qualifying error.
Explain the false refund and manipulation. Explain that you did not initiate, approve or benefit from the transfer.

For a qualifying unauthorized electronic transfer, the bank generally has 10 business days to investigate. It may take up to 45 days in many cases if it provides required provisional credit, while certain transactions can have longer periods.

Be accurate about what happened. Do not falsely state that you did not initiate a payment that you personally approved. Also do not allow the bank to treat separately initiated account-takeover transfers as though you authorized them.

Bank Fraud Call Script

Hello. I need to report a fake refund scam involving my account.

A person claimed to represent [company or agency] and offered a refund for [purchase, subscription or service]. The person obtained [remote access, account information or a verification code] and claimed that too much money had been refunded.

I sent [$ amount] on [date and time] using [payment method]. The transaction number is [number], and the recipient information is [details].

I also need you to review my account for transactions the scammer may have initiated without my permission.

Please:

  • Stop or recall any pending payment
  • Contact the receiving institution
  • Freeze remaining recipient funds when possible
  • Disable compromised online access
  • Remove unknown devices and recipients
  • Investigate each unauthorized transaction
  • Give me a fraud case number

Please explain what written confirmation or documents you need from me.

Written Bank Fraud Report

[Your full name]
[Your address]
[City, state and ZIP code]
[Telephone number]
[Email address]

[Date]

[Bank or credit union name]
[Fraud or dispute department address]

Subject: Fake refund scam and request for fraud investigation
Account ending in: [last four digits]
Case number: [number]

Dear Fraud Department:

I am reporting a fake refund scam involving a person who claimed to represent [company or agency].

The person offered a refund for [reason] and instructed me to [install remote-access software, log in to online banking, provide a code or other instructions]. The person then falsely claimed that an excessive refund had been deposited and demanded repayment.

Payment details:

  • Date and time: [information]
  • Amount: [$ amount]
  • Payment method: [method]
  • Transaction number: [number]
  • Recipient: [information]

Please attempt to stop, recall or reverse the transaction and contact the receiving institution to request a freeze of remaining funds.

Please also investigate the following transactions that I did not initiate or authorize:

  • [Transaction, date and amount]
  • [Transaction, date and amount]

The scammer may have obtained access to my account through [remote access, stolen credentials or a security code]. Please secure the account and provide the written result of your investigation.

I have enclosed the payment receipt, messages, screenshots and government report confirmations.

Sincerely,

[Signature]
[Printed name]

What if You Installed Remote-Access Software?

Use another trusted device to contact financial institutions. Then:

  • Disconnect the affected device from the internet.
  • Remove the remote-access program.
  • Run updated security scans.
  • Install operating-system and browser updates.
  • Review browser extensions.
  • Check saved passwords.
  • Review email forwarding rules.
  • Change banking and email passwords from a clean device.
  • Enable multifactor authentication.
  • Remove unknown account recovery methods.
  • Consider professional technical assistance when compromise is extensive.

Do not continue using the affected device for banking until you reasonably believe the scammer’s access has been removed.

What if You Shared Personal Information?

Additional protection may be needed if you shared:

  • Your Social Security number
  • A driver’s license or passport
  • Your bank-account number
  • Card information
  • Online-banking credentials
  • An email password
  • A photograph of your identification
  • Tax information

Consider:

  • Creating an FTC Identity Theft Report
  • Freezing all three credit reports
  • Reviewing all three reports
  • Replacing compromised cards or accounts
  • Securing your mobile-carrier account
  • Monitoring for new inquiries and accounts

Use:

What if You Deposited the Fake Check?

Contact the bank immediately and explain that the check may be fraudulent.

Do not:

  • Spend the displayed money
  • Withdraw cash
  • Return part of the check
  • Send money to another person
  • Assume the check is valid because funds are available

Ask the bank:

  • Whether the check can be placed under review
  • Whether any funds should remain untouched
  • What fees or account restrictions may result
  • What documents the bank needs
  • Whether the issuing institution can be contacted

The bank may eventually reverse the entire deposit. Availability of funds is not final verification that the check is genuine.

Where to Report the Scam

Report the incident to:

  • The bank or payment provider
  • The company being impersonated
  • The Federal Trade Commission
  • The FBI Internet Crime Complaint Center
  • Your state attorney general
  • Local law enforcement when money was lost, threats occurred or a cash courier was involved
  • The U.S. Postal Inspection Service when cash or checks were mailed

Official reporting services:

Also see:

How to Report a Scam for Free

Evidence to Save

Preserve:

  • The original email or text
  • The full sender address
  • The caller’s telephone number
  • Voicemails
  • Website addresses
  • Fake invoices
  • Remote-access software names
  • Verification-code messages
  • Payment instructions
  • Gift cards and receipts
  • Wire or payment-app receipts
  • Recipient account details
  • Cryptocurrency addresses and transaction hashes
  • Cash or package tracking information
  • Bank case numbers
  • FTC, IC3 and police report numbers

Create a timeline beginning with the first refund message and ending with the latest bank, merchant or law-enforcement contact.

Watch for a Second Recovery Scam

After reporting the loss, you may be contacted by someone who says:

  • Your stolen funds were located.
  • A cryptocurrency investigator traced the money.
  • A government agent approved reimbursement.
  • A law firm can force the bank to pay.
  • A private recovery company can guarantee the return.

The person then demands an advance payment, tax, retainer or account information.

Do not pay anyone who contacts you unexpectedly and guarantees recovery. Verify every organization independently and remember that filing official scam reports is free.

Helping a Family Member

A victim may feel responsible for the supposed overpayment and may believe that an employee will lose a job unless the money is returned.

Respond calmly:

  • Ask them not to send anything else.
  • Help end the call and remote session.
  • Do not shame them.
  • Contact the real bank together.
  • Explain that the refund displayed on the screen may be false.
  • Preserve all evidence.
  • Report the payments immediately.
  • Help secure accounts and devices.

The scammer deliberately creates guilt, panic and secrecy. A calm outside conversation can interrupt the manipulation and prevent additional losses.

Fake Refund Scam Prevention Checklist

  • Do not trust an unexpected refund offer.
  • Check whether the original charge actually exists.
  • Contact the company through its official account.
  • Never install remote-access software for a refund.
  • Never open online banking while someone watches remotely.
  • Never share verification codes.
  • Never pay to receive a refund.
  • Never return an over-refund using a different payment method.
  • Never send money based only on a displayed bank balance.
  • Never buy gift cards or cryptocurrency for a company refund.
  • Do not deposit a check and return part of the money.
  • Talk to a trusted person before moving a large amount.
  • Report suspicious refund messages as spam.

Mistakes to Avoid

Calling the number in the refund message

The number may connect directly to the scam operation. Contact the company independently.

Trusting the displayed bank balance

A remote-access scammer may manipulate what you see or move your own funds between accounts.

Returning the supposed overpayment

Verify the credit through the real merchant and bank before taking any action.

Sharing a verification code

The code may allow the scammer to access your account or complete a transfer.

Buying gift cards

A legitimate merchant does not correct a refund through gift-card numbers.

Sending money from an available check deposit

The check can be rejected weeks after the funds first appear.

Deleting the messages

Preserve all contact and payment information for the bank and law enforcement.

Waiting to report the loss

Scammers may quickly redeem gift cards, withdraw money or move funds through other accounts.

Paying a recovery agent

An unexpected person promising guaranteed reimbursement may be another scammer.

Frequently Asked Questions

How does a fake refund scam work?

A scammer unexpectedly contacts you about a refund for a purchase, subscription, technical-support service or previous fraud loss. You may be directed to call fake customer service, click a phishing link or install remote-access software. The scammer then claims that money was deposited into your account, often showing a false or manipulated bank balance. Next, the person says the refund was too large and pressures you to return the difference through gift cards, a wire, cash, cryptocurrency or a payment app. The refund was never real, so any money sent comes from your own funds.

Why does a refund company need remote access to my computer?

A legitimate company generally does not need remote access to issue a customer refund. Scammers request access so they can view banking information, capture passwords, read security codes and manipulate what appears on the screen. They may tell you to log in to online banking and then make it appear that an excessive refund was deposited. Remote access can also allow them to add recipients, move money or install malicious software. End the session, disconnect the device and contact your bank from another trusted device. Remove the remote-access program and change important passwords from a device the scammer did not control.

What should I do when someone says they accidentally refunded too much?

Do not return money during the call. End the conversation and independently contact the company through its official app, website, receipt or verified telephone number. Check the account from a trusted device and ask the bank whether the supposed credit actually posted. A genuine merchant can work with its bank and payment processor to correct an erroneous credit through the original payment system. It should not ask you to buy gift cards, send cryptocurrency, wire money to an employee or mail cash. Request written documentation and a case number before taking any action involving your money.

Can a scammer make my bank balance look higher?

Yes. With remote access, a scammer may alter what appears in a browser, show a counterfeit banking page or move your own money from another account while claiming it is a refund. The person may hide parts of the screen, prevent you from refreshing the page or insist that you remain connected. A displayed balance is not proof that an external refund was received. End remote access and check the transaction from another trusted device. Contact the bank through the number on your card or statement and ask it to identify the source, status and ownership of any apparent credit.

What happens when I deposit a fake refund check?

The bank may make some or all of the funds available before discovering that the check is counterfeit, altered or drawn on a compromised account. This can make the deposit appear legitimate. If you send part of the money back, the scammer receives real money while the check remains under review. When the check is rejected, the bank can reverse the deposit, charge fees and require repayment of money withdrawn or transferred. Contact the bank immediately, explain that the check may be fraudulent and leave the displayed funds untouched. Do not return any portion to the sender.

Will the FTC or another government agency charge a fee to release a refund?

No legitimate government refund program requires payment by gift card, cryptocurrency, wire, cash or payment app before releasing the money. A scammer may use the name of a real agency or employee, send a fake badge or provide an official-looking case number. Do not use the telephone number or link supplied by the person. Verify FTC refunds through the agency’s official refund page and verify other government communications through independently located government contact information. Do not provide remote access, banking passwords or security codes to someone who unexpectedly claims to administer a government refund.

Can I recover money paid in a fake refund scam?

Recovery is possible in some cases but is not guaranteed. Contact the bank, card issuer, gift-card company, wire service, payment app, cryptocurrency exchange or delivery company immediately. Tell it that the payment resulted from a fake refund scam and request a stop, reversal, recall, recipient freeze or package interception. Provide the exact transaction time, amount and destination information. Report separately any transfers the scammer initiated without permission. Also report the incident to the FTC and FBI IC3. Recovery becomes more difficult after money is redeemed, withdrawn, moved through multiple accounts or converted into cryptocurrency.

How can I tell whether a refund is real?

Verify it through the merchant and payment account independently. Open the merchant’s official app or website rather than using a link in an unexpected message. Confirm the original order, charge, refund amount, processing date and destination payment method. Check the transaction from a trusted device and ask the merchant for a refund reference such as an ARN, STAN, RRN or other processor identifier when available. A genuine refund does not require advance payment, remote access, gift cards or a separate transfer. When a real refund is missing, work with the merchant and issuing bank to trace the credit.

Why am I being contacted again after reporting a scam?

Scammers may retain, sell or exchange information about people who previously lost money. A new caller may know the earlier scam, amount lost and reports you filed, making the recovery offer sound convincing. The caller may pretend to be a government agent, attorney, investigator or cryptocurrency recovery expert and demand an upfront fee. Do not assume that detailed knowledge proves legitimacy. Government scam reports are free, and no private service can guarantee recovery. Verify every organization independently, do not pay advance fees and report the new contact as a refund or recovery scam.

Official Fake Refund Scam Resources

Bottom Line

A fake refund scam turns the promise of receiving money into pressure to send money. The scammer may use a false invoice, phishing link, remote access, manipulated bank balance or fake check to make the story appear legitimate.

Do not pay to receive a refund, return an overpayment through a different method or allow an unexpected caller to control your device. Verify the refund independently through the real merchant and bank. When money or information was already lost, report it immediately, request recovery and secure every affected account.

The practical rule: A real refund sends money back. It does not require you to send money somewhere else first.

Charge Decoded provides general U.S. consumer information and does not provide individualized legal, banking, computer-security or financial advice. Recovery rights and reimbursement procedures depend on the payment method, institution, network rules and facts of the transaction.