Tech support refund calls: the overpayment is staged
This one starts with a call, email, or pop-up from a 'support company' saying a service you supposedly bought is shutting down and your payment will be refunded. To process it, they need you connected to your computer and logged into your bank. A 'refund' appears, always too large, and you are pressured to return the difference by gift cards or wire. The refund is fake, produced with a doctored screen or a temporary transfer between your own accounts, and the only real money is what you send back.
What to do
- End the call. A refund that requires your participation on a live call, remote access, and a bank login is not a refund process that exists anywhere.
- Never let a caller connect to your computer or watch you use your bank. Real refunds are issued to the original payment method automatically, with no session and no audience.
- Never return a 'refund overpayment.' If surprising money seems to appear in your account during such a call, call your bank on the number on your card and let the bank sort out what is real.
- If software was installed during the call, disconnect from the internet, uninstall it, restart, and run a full Windows Security scan.
How the fake refund is manufactured
- Edited bank pages: with remote access, the scammer edits the visible webpage (the numbers on screen) while the victim watches. The account itself never changed.
- Your own money moved: transfers between the victim's checking and savings create a 'deposit' that looks external.
- A real but reversing transfer: in some versions a hot check or reversible transfer is used, which the bank claws back days later.
- The pressure script: the agent claims the error will cost them their job, begs secrecy from the bank, and insists gift cards are the only way, each element engineered to stop verification.
Sent the 'difference' back already? Contact your bank immediately using the number on your card, describe it as a refund scam, and ask about recall options; then report at reportfraud.ftc.gov and ic3.gov. Uninstall any remote access software and change your banking and email passwords from a clean device. Keep notes of times and amounts, banks and investigators both work from timelines.
Common questions
How could they know I once paid for tech support? Often they do not; the calls go out in bulk and a few recipients genuinely bought support once, or even bought it from the same scam years earlier, since victim lists are resold. A correct guess about your past is not proof of anything.
My bank balance still shows the refund. Safe? Balances shown during the call can be edited on screen or reflect transfers that reverse. Wait for your bank, contacted independently, to confirm what actually posted and settled. Until then treat the money as not yours and do not spend or return it.
Related