Powerful malware protection.

Imagine getting a call or email from a tech support company you vaguely remember using. They say they overcharged you and are offering a refund. Sounds great, right? That little bit of good news is precisely the bait used in one of the most devastatingly effective scams happening right now: the “fake refund” tech support scam.

This scam doesn't just want your credit card number; it aims to take control of your entire bank account and sometimes your device, all while you’re thinking you’re getting money back.

How the Scam Plays Out (and Where It Traps You)

The scam artists usually contact you unsolicited—they call, email, or even send a pop-up warning you of a supposed subscription charge. They identify themselves as being from a well-known company (like a major software or security brand) or a generic “Tech Support” department.

Here is the common script:

1. The Hook: They inform you that a recent tech support transaction was processed for too much money (say, $500 instead of $50). They apologize profusely and promise to immediately process the refund.
2. The Device Access: To "process the refund," they claim they need remote access to your computer. They instruct you to download a screen-sharing tool (like TeamViewer or AnyDesk) and give them the access code. Never give remote access to unsolicited callers!
3. The Bank Trap: Once they are controlling your screen, they tell you they need to verify your bank details by having you log into your online account. This is the critical moment.
4. The "Accidental" Overpayment: While you are logged in, the criminal manipulates what you see on the screen. They pretend to type the refund amount ($50) but deliberately enter the wrong amount, making it look like they accidentally credited you $5,000.
5. The Panic Button: They panic, begging you to send the extra money back immediately, often via gift cards, bank transfer, or crypto. Because they look so distressed, and you believe you are now $4,950 richer, you rush to comply and send them money, which was yours all along.

In reality, they didn't put any money in. They either manipulated the on-screen bank balance visually (since they are controlling your screen) or quickly transferred money out of your account and then pretended they put too much in.

Your Three Rules for Self-Defense

You have an ironclad defense against this fraud: Legitimate companies will not initiate unsolicited contact for a refund.

1. Stop and Hang Up/Delete: If someone calls you out of the blue about a refund, end the conversation immediately.
2. Verify the Source: If you think the refund might be legitimate, do not use the phone number they gave you. Go to the official website of the company (e.g., your bank or software vendor) and look up their customer support number yourself.
3. Never Grant Remote Access: A technical refund can be processed without remote access to your computer or your bank account. If they ask for remote access for a refund, it is 100% a scam.

Stay safe, be skeptical, and remember: if a deal sounds too good to be true, it’s probably a scam trying to separate you from your money.

October marks Cybersecurity Awareness Month, a global initiative that encourages individuals and organizations to take proactive steps to protect themselves online. In 2025, the theme is “Building a Cyber Strong America,” a call to action for everyone—from government agencies to private companies and everyday internet users—to strengthen our collective defenses against cyber threats. Cybersecurity isn’t […]
Read More»