Scam library · Tech support · Phone calls · Email & phishing
Tech support refund scam
An email says your antivirus or tech support subscription is being renewed, or a caller says the company is closing and owes you a refund. To process it, they need to connect to your computer.
During the 'refund', they claim to have sent too much, like $4,000 instead of $400, and beg you to send back the difference. You never received anything.
The story is designed to make you feel responsible for someone else's mistake.
What the message looks like
From: Caller from 'Tech Support Refund Department'
We're closing our support service, so you're owed a refund of $399. I'll connect to your computer to process it.
Oh no, I typed $3,999 by mistake! Please, I'll lose my job. Can you send back $3,600 in gift cards?
How this scam works
With remote access, scammers open your online banking and use tricks to make it look like money arrived. Often they've simply moved money between your own accounts, like from savings to checking, or edited the page.
Then they ask for the 'overpayment' back by wire, gift card, crypto or cash by mail. Some cry or say they'll lose their job.
The FTC says tech support scams are common, and older adults are especially targeted.
Remember that a real refund never requires you to give someone access to your computer, and never requires you to send money back. If you're owed a real refund, the company can send it to your original payment method without anyone logging into your bank.
Scammers often keep victims on the phone for hours and call back days later with new problems or new 'refunds'. If you've been targeted once, be extra careful with any follow-up calls, including ones offering to help you recover money.
Red flags
- Calls or emails about refunds you didn't expect.
- Requests to connect to your computer.
- A refund of the wrong amount.
- Requests to send back the difference.
- Emotional pressure.
How to tell it’s fake
- Check your bank balance yourself on a different device.
- Call the company using a number from its official site.
- Never let a caller access your computer.
- Notice whether money only moved between your own accounts.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- End the call and disconnect from the internet if they've connected.
If you paid
- Contact your bank right away, and report to ic3.gov and ReportFraud.ftc.gov.
If you shared personal info, a password or a code
- Have your computer checked, uninstall remote access software and change passwords from a safe device.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Scam Guard runs in Chrome and Edge on your computer. It checks refund emails and the pages you're sent to, and warns about remote access downloads before you install them. If a refund seems legit, get a scam expert's opinion before letting anyone in.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- They showed money in my account. Was it real?
- Usually it was moved from your own savings or the page was edited.
- Do companies need remote access to refund me?
- No.
- I sent gift cards. What now?
- Contact the gift card company immediately with the card numbers.
- How do I remove remote access software?
- Uninstall it and have the computer checked by a trusted technician.