Mayfield Learning
Spot a scam · walkthrough

The "you were charged, call for a refund" scam

This scam starts with a scary message about money. It looks like a bill from a name you know. Maybe Norton, McAfee, Geek Squad, PayPal, or Amazon. The trap is the phone number. It does not reach the real company. It reaches the scammer. He waits for you to call.

Buddy, your friendly guide

Step 1 See what it looks like

EmailBilling <no-reply@account-renewal-support.com>

Subject: Your order is confirmed. Thank you for your purchase. Your Norton 360 subscription has renewed. Amount charged: $499.99 to your card on file. Order #NRT-90381. If you did NOT make this purchase, you must call our Billing Department within 24 hours to cancel and get a full refund. Call now: 1-888-555-0147. This charge will post to your account today.

This is a made-up example to teach you. We will never show you a real person’s message.

If you call, here is what happens
Thank you for calling Billing. I see the $499.99 charge. To refund it, I just need to connect to your computer so I can process it on your account. Please go to this website and download our refund tool.
I don't want to give anyone control of my computer.
It is the only way the bank lets us send the refund. It is completely safe, I do this all day.
Oh no. I made a mistake. I typed $4,999 instead of $499. My manager will fire me. Please, you have to send the extra back. Go buy gift cards and read me the numbers, or I will lose my job.
No. A real refund never works like this. Goodbye.

Step 2 Find the red flags

  1. 1

    Amount charged: $499.99

    The big scary number wants you to panic. It stops you from thinking.

  2. 2

    you must call our Billing Department within 24 hours

    The deadline is fake. It rushes you so you will not check.

  3. 3

    Call now: 1-888-555-0147

    This is the trap. Real companies do not work this way. The number reaches the scammer.

  4. 4

    get a full refund

    The refund is the bait. On the call, they go after your computer and money.

  5. 5

    Order #NRT-90381

    A fake order number is added so the message looks real.

Step 3 See why it works

It scares you about money. So you want the charge gone fast. When you call, a stranger guides you. They ask to see or control your computer. They say it helps them send the refund. Then they pretend they sent too much by mistake. They beg you to send the extra back in gift cards. That trick is the real scam. There was never a real refund. The gift card money is gone for good. This is true even if no real charge exists.

What to do
  1. Take a slow breath. You do not have to act in 24 hours, no matter what it says.
  2. Do not call the number. Do not reply. Do not click any link in it.
  3. To be sure, call your bank. Use the number on the back of your card. Ask if there is any real charge.
  4. To check the company, type their website yourself or use a saved bookmark. Never use a link or number from the message.
  5. If you already called, hang up fast if they ask to see your screen, control your computer, or buy gift cards. That is always a scam.
  6. Delete the message. You can report it to the FTC at ReportFraud.ftc.gov. You can forward a scam text to 7726 (SPAM).
Buddy, your friendly guide
Remember this one thing

A real refund never needs your computer or gift cards. If someone asks for either, it is a scam, every time.

More walkthroughs