Scam guide

Refund scam: is this overpayment real?

A refund scam claims you’re owed money or were overpaid, then tricks you into sending some back. It often starts with a fake renewal or support call. Here’s how to read it.

Also known as: overpayment scam, tech support refund scam, antivirus refund scam, fake refund email

How the refund scam works

  1. 1

    A refund offer appears

    You’re told a service is closing or you were charged in error.

  2. 2

    Remote access is requested

    To “process” the refund, they ask to connect to your computer.

  3. 3

    A fake overpayment is shown

    They make it look like they refunded far too much, blaming a typo.

  4. 4

    You’re pressured to send it back

    You’re told to return the “extra” by wire or gift cards right away.

Red flags to watch for

  • A claim that you were overpaid and must return the difference.
  • A refund that requires remote access to your computer.
  • Pressure to send money back by wire or gift cards.
  • A refund for a service you don’t remember using.
  • A balance that “suddenly” shows a large extra amount.
  • Instructions to keep the refund call going and not hang up.

What to do if you’re targeted

  • Stop. A real refund never requires you to send money back.
  • Never give remote access to fix a refund.
  • Hang up and check your real bank balance yourself.
  • Don’t trust an on-screen total a caller can fake.
  • If you gave access, disconnect and run a security scan.
  • Report it to the FTC and watch your accounts closely.

How Oversight catches the refund scam

Screenshot the refund email, the pop-up, or the caller ID and run a Deep Scan. Oversight flags the overpayment trick, remote-access requests, and urgency as a high-risk pattern, returning a clear verdict with a plain-English reason. Scam-call labeling marks known refund-scam numbers as “Scam Likely.” With Family Overwatch, you’re alerted if a parent gets a high-risk refund message. Oversight guides your judgment; check any refund by logging into the account yourself, not through a caller.

Oversight is an assistive tool, not a guarantee. For anything involving money or account access, confirm with the sender using a phone number or website you already trust — never the contact details in the message.

Refund scam: questions, answered

Is the “we refunded you too much” call a scam?

Yes. A real company can reverse its own error and never needs you to wire or gift-card the difference back. That step is the scam.

Why does a refund call ask for remote access?

Access lets them fake your balance and move your money. No legitimate refund ever requires you to share your screen or device.

I let a refund caller into my computer. What now?

Disconnect from the internet, run a security scan, change key passwords, and call your bank to watch for unauthorized transfers.

Not sure if it’s a scam? Get a verdict in 3 seconds.

Oversight is a free AI scam detector and scam checker for email, texts, DMs, and calls. Screenshot anything and know if it’s a scam before you tap or pay.

More scams to check