Product recall refund text scam

What the message looks like

How this scam works

Scammers send a text or email claiming a purchase was recalled for a safety issue. The wording often mirrors real customer-service language: "sign in to your account through the official website and review your order below." The link is not official. It leads to a look-alike login page that steals your credentials, payment info or both.

AARP notes these fakes commonly impersonate trusted retailers such as Amazon, Costco and Walmart. You may not even remember ordering the exact item named in the message. That detail does not matter to the scammer; fear of a dangerous product is enough to make many people click.

Legitimate recalls almost never require you to rush through a link in an unexpected text. The U.S. Consumer Product Safety Commission posts real recalls, and major retailers announce them on their own sites and apps. In many cases the main step is simply to stop using the product until you check the official notice.

Holiday shopping season means more packages and more "is this about my order?" moments. Scammers count on that. If a recall message feels urgent, pause and open the retailer's app or website yourself instead of the message's link. A second opinion from someone you trust is always allowed.

Red flags

• Unexpected text or email about a recall with a sign-in link.
• Pressure for a "full refund without delay" if you act now.
• Sender name looks familiar but the domain is off or shortened.
• The message asks for your store password, payment card or a one-time code.
• You cannot find the same recall on the retailer's official site or at CPSC.gov.

How to tell it’s fake

1. Do not click the link. Open the retailer's official app or type the real website yourself and check Orders or Account messages.
2. Look up the product at the U.S. Consumer Product Safety Commission (cpsc.gov/Recalls) or the company's recall page.
3. In most legitimate recalls, stopping use of the product comes first; a rushed "sign in for refund" text is a warning sign.
4. If you are unsure whether an order is real, check your bank or card statement and the retailer's order history, not the text.

What to do if you clicked, paid or shared info

Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.

If you clicked a link or called back

• Close the tab. If you entered a password, change it on the real site from a bookmark or typed URL, and change any reused passwords.
• Turn on multifactor authentication if it was off. Watch for password-reset emails you did not request.

If you paid

• If you entered a card or paid a "return shipping" fee, call your bank or card issuer using the number on your card and dispute the charge.
• Save the message and screenshots for your report to the retailer and to ReportFraud.ftc.gov.

If you shared personal info, a password or a code

• If you shared a login, treat the account as compromised: new password, check recent orders and saved payment methods, and remove unknown devices.
• If you shared more personal information, start a recovery plan at IdentityTheft.gov.

Questions people ask

Do real stores send recall texts?

Sometimes retailers notify customers, but you should still verify in the official app or website. Never sign in through a link in an unexpected message.

Where can I check if a product was really recalled?

Use the U.S. Consumer Product Safety Commission recall list and the manufacturer's or retailer's own recall page. Type those addresses yourself.

I clicked and signed in. What now?

Change the password on the real site immediately, enable multifactor authentication, review orders and payment methods, and watch your email and bank for follow-up fraud.

Sources

• AARP Fraud Watch Network Helpline: recall scam spike warning
• U.S. Consumer Product Safety Commission: Recalls
• FTC: ReportFraud.ftc.gov