Tech Refund Scam

The tech refund scam is a variant of the remote access scam specifically designed to steal money under the guise of a refund. A victim receives a call or email claiming to be from a well-known technology company — an antivirus provider, internet service company, or software firm — stating that a subscription is being cancelled and a refund is owed.

Once the fraudster gains remote access to the victim's computer (via tools like AnyDesk or TeamViewer), they use browser developer tools or HTML editing to make the victim's online banking appear to show a much larger deposit than was actually made — for example, showing £3,000 when only £30 was credited. The victim is told a mistake was made and asked to return the 'extra' money urgently by bank transfer, gift card, or cryptocurrency. The money sent is real; the inflated bank balance was never there.

Victims are often elderly or less technically confident. Scammers create panic by insisting the money must be returned immediately or the victim could lose their account or be prosecuted. The refund premise is purely a pretext to initiate contact and gain system access.