The Fake Refund Scam

a real refund arrives silently

The fake refund map

The caller promises money owed and needs account details to "release" it. A real refund never needs the parent's bank login or a verification code: that request is the theft.

1. RecognizeThe refund tellsAn unsolicited call or text about a refund, account details requested to "pay" it, urgency ("expires today"), or government names used loosely (IRS, Social Security, Medicare).
2. In the momentConfirm nothingDo not confirm any account details and never read back a code. Hang up or stop replying: a real company is reachable through the number on the statement or the official app.
3. VerifyIndependently, alwaysCall the company or agency using a number the family looks up itself, exactly like the independent verification method.
4. If a code was read backTreat the account as compromisedFollow the compromised-account response: change passwords, check settings, and if money moved, use the first-hour recovery plan.

Send this Print this

How it works

The caller claims the parent was overcharged, is owed a rebate, or has an unclaimed government refund. To "release" the money they need the bank account, card number, or a payment app. Sometimes they ask the parent to confirm a code that is actually a verification code for an account. The refund never arrives; the account access is the theft. It is the payment-side cousin of the utility shutoff scam, which threatens a loss instead of promising a gain.

Recognition in one minute

• An unsolicited call or text about a refund or overpayment. Real refunds come through the original payment method, silently.
• Account details requested to "pay" the refund. A refund does not need the parent's bank login or a verification code.
• Urgency. "The refund expires today" is the same pressure as "the power gets cut today."
• Government names used loosely. The IRS, Social Security, and Medicare do not call about refunds needing account details. See the IRS scam and the Social Security call.

What to do in the moment

1. Do not confirm any account details or read back any code.
2. Hang up or stop replying. A real company can be reached through the number on the statement or the official app.
3. Verify independently. Call the company or agency using a number the family looks up itself, exactly like the independent verification method.
4. If a verification code was read back, treat the account as compromised and follow the compromised-account response.

If money or details already changed hands

Follow the first-hour scam recovery plan: contact the bank or payment company through an official channel, preserve the evidence, and report it. The FTC takes these reports at reportfraud.ftc.gov, and the FTC's guidance on avoiding scams is the reference for the broader pattern.

The family conversation

Tell the parent the one-line rule and practice it once: "If anyone calls or texts about money coming to me, I do not give account details or codes, and I call my family." The same dignity-first approach as the suspicious message playbook: the parent who reports the weird call is the parent who is protected.

Related guides

• The fake check scam: another overpayment story that ends with money or details going back
• The fake renewal scam: when the unexpected money claim is framed as a charge
• The suspicious message or call playbook
• First-hour scam recovery
• How to verify a message independently

Sources & verification

This page is checked against the standards in our editorial policy, preferring government sources for scam patterns. Reviewed August 2026:

• FTC: How To Avoid a Scam (retrieved August 2026)
• FTC: What To Do If You Were Scammed (retrieved August 2026)

Found an error? Report it: we log and correct material mistakes publicly.

Found an error? Report it.