The refund scam is the tech support scam's clever cousin. Instead of scaring you about a virus, it hooks you with a charge you did not make, then flips a refund into a way to drain your account. The overpayment trick at the center of it is simple once you see it.
How this scam works
You get an email that looks like a receipt: your Geek Squad, Norton, or McAfee subscription auto renewed for three or four hundred dollars. It includes a number to call if you did not authorize it.
You call to cancel and get your money back. The agent agrees and offers a refund.
To process it, they take remote control of your computer, sometimes asking you to log into your bank so they can confirm the refund.
They show you a refund that is far too large, blaming a typo, and act panicked that they will lose their job over it.
They beg you to return the difference, usually in gift cards or cash. The refund was never real. You are handing over your own money.
What it sounds like
Agent: Oh no, I typed 5,000 instead of 500. My manager will fire me. Please, can you send back the extra in gift cards?
You: No refund was ever sent. Hang up and check your real bank balance yourself.
Red flags
- An invoice by email for a subscription you do not remember buying, with a phone number to dispute it.
- An offer to refund your money that requires remote access to your computer.
- A claim that they refunded too much and need you to pay the difference back.
- Any request to repay in gift cards, cash, or wire.
What to do
- Do not call the number on the invoice. Check your real accounts by logging in yourself, not through anyone on the phone.
- If you gave remote access, disconnect, change passwords from another device, and watch your accounts.
- If you sent gift cards, call the issuer at once and report the card as used in a scam.
How to report this scam
See the full reporting guide for every US agency and what each one handles.
Watch it happen
Frequently asked questions
Is the Geek Squad renewal email real?
Almost always no. These invoices copy Geek Squad, Norton, and McAfee branding to get you to call. Check your actual bank and subscription accounts directly rather than calling the number in the email.
How does the overpayment work if no money moved?
The scammer has remote control and simply edits what your browser shows, or moves money between your own accounts, to make it look like they sent too much. Nothing was ever added to your balance.
What if I already paid them back?
Contact the gift card company or your bank immediately, keep all receipts, and file a report with the FTC and the FBI Internet Crime Complaint Center.
Back to all scammers