How the scam works
- Out-of-the-blue notice of a refund or overpayment
- Pressure to send back the difference quickly
- Request to pay back in cryptocurrency, gift cards, or overseas transfer
- Request to install remote-access software on your computer
- Secrecy and urgency
Immediate actions
- Stop contact with the caller.
- Call your bank and ask them to freeze or reverse the suspicious transfer.
- Never share passwords or one-time codes.
- Never grant remote access to your computer.
- Save all evidence (call logs, messages, transfers).
- Report to Scamwatch, ReportCyber, and police.
Prevention
- If a refund is real, the company will be reachable through their official contact details — verify directly.
- Only act on refunds once the original transaction has fully cleared.
- Do not trust a screenshot as proof of payment.
- Never install remote-access software at a stranger's request.
- Monitor accounts regularly so unexpected transactions stand out.