Mayfield Learning
Spot a scam · walkthrough

The "you were charged, call for a refund" scam

This made-up bill says you owe money. It gives a phone number for help. That call leads to a fake refund story. Check the charge with your real bank or the company you know.

Buddy, your friendly guide

Step 1 See what it looks like

EmailBilling <no-reply@renewal-support.example>

Subject: Your order is confirmed. Thank you for your purchase. Your Norton 360 subscription has renewed. Amount charged: $499.99 to your card on file. Order #NRT-90381. If you did NOT make this purchase, you must call our Billing Department within 24 hours to cancel and get a full refund. Call now: 1-888-555-0147. This charge will post to your account today.

This is a made-up example to teach you. We will never show you a real person’s message.

If you call, here is what happens
Thank you for calling Billing. I see the $499.99 charge. To refund it, I just need to connect to your computer so I can process it on your account. Please go to this website and download our refund tool.
I don't want to give anyone control of my computer.
It is the only way the bank lets us send the refund. It is completely safe, I do this all day.
Oh no. I made a mistake. I typed $4,999 instead of $499. My manager will fire me. Please, you have to send the extra back. Go buy gift cards and read me the numbers, or I will lose my job.
No. I will check with the real company myself. Goodbye.

Step 2 Find the red flags

  1. 1

    “Amount charged: $499.99”

    A sum in an email does not prove you were charged. Check your real account.

  2. 2

    “within 24 hours”

    Check the issue and any real deadline with the company.

  3. 3

    “Call now: 1-888-555-0147”

    Use a known company number, not the one in this suspect email.

  4. 4

    “get a full refund”

    The refund promise lures you into giving device access.

  5. 5

    “Order #NRT-90381”

    An order number can be made up. Check your own records.

Step 3 See why it works

A fake bill makes you want a refund fast. The caller then claims to refund too much. They ask you to return it in gift cards. A balance on their screen is not proof that money arrived.

What to do
  1. Do not use the links or number in this message.
  2. Check the charge in your bank app or call the number on your card.
  3. Find the company site or support number yourself.
  4. Do not install the caller's refund tool or give remote access.
  5. Do not buy gift cards to return a claimed extra payment. Ask your bank what really arrived.
  6. If you shared codes or access, get help now. Keep the message and receipts.
Buddy, your friendly guide
Remember this one thing

Check the real charge yourself. Do not give a caller remote access or card codes for a refund.

More walkthroughs

Buddy, your friendly guide

How can I help?

Choose what would help you right now.