Fake Zelle Product Recall Refund Scam
Criminals send fake recall-refund notices claiming a Zelle transfer is waiting, then use the verification process to harvest bank credentials.
Part of: Fake Product Recall Refund Scams
Last reviewed: 8 June 2026
Zelle is embedded in major US banks, and some genuine recall refunds are processed as direct bank transfers that pass through the Zelle network. Scammers leverage this by sending victims messages claiming a product recall refund of a specified amount has been initiated via Zelle to their bank account and just needs 'account verification' to complete.
Because the refund is said to be 'already approved' and the amount is specific, victims are inclined to complete the verification step quickly without scrutinising the source. The verification link loads a clone of their bank's online portal and captures username, password, and sometimes a one-time SMS code.
These campaigns typically launch within 24 to 48 hours of a widely reported recall affecting a mass-market product — a baby item, kitchen appliance, or vehicle component — so the email feels timely and relevant.
How this scam works on the Zelle brand
An email or SMS arrives: 'Your Zelle refund of $[amount] for the [recalled product] recall is ready. Please verify your bank account to receive funds within one business day: [link].' The link goes to a page mimicking the victim's bank login, often personalised using partial data like first name or bank name obtained from a breached list.
After entering banking credentials, victims are shown a 'pending transfer' page requesting an SMS verification code sent to their phone. Entering the code completes a real-time relay attack in which the scammer uses the credentials to log in to the victim's real bank account and initiate their own outgoing Zelle transfer.
If the first link fails to load correctly, the scammer follows up by phone, posing as a bank representative who will 'process the refund manually' — a pretence that allows them to ask for account details verbally.
Common red flags
- You never enrolled in a recall programme or contacted the manufacturer about a refund.
- The link goes to a site other than your bank's official domain.
- The recall is real but you never purchased the affected product.
- You are asked to enter your online banking username and password to 'receive' the refund.
- The message references Zelle by name and asks for bank verification — Zelle refunds do not require separate verification steps after login.
- An SMS code is requested by the verification page rather than arriving as a security alert from your bank.
- Urgency: 'Refund expires in 24 hours if account is not verified.'
How to protect yourself
- Go directly to your bank's official website or app — any legitimate Zelle deposit will appear in your transaction history.
- Contact the manufacturer or retailer of the recalled product through their official website to check refund status.
- Never enter banking login credentials on a page reached through an unsolicited email or SMS.
- Enable your bank's transaction alerts so you see incoming Zelle credits as they happen.
- Use multi-factor authentication on your bank account so stolen passwords alone cannot log in.
How to report it
- Report to your bank's fraud team immediately if your credentials were entered.
- Forward phishing emails to your bank's dedicated phishing address (check your bank's security page for the exact address).
- Report to the FTC at reportfraud.ftc.gov.
- Report recall impersonation to the CPSC at cpsc.gov.
- File with ic3.gov if money was taken from your account.
Frequently asked questions
Do genuine recall refunds come through Zelle?
Some manufacturers do issue refunds via direct bank transfer, which may route through Zelle. However, you would have first enrolled in the recall programme directly with the manufacturer — an unsolicited notification you did not request is almost certainly fraudulent.
How would I know a legitimate Zelle recall refund arrived?
It would appear as a credit in your bank account's transaction list. No separate 'verification' step is required after the bank transfer is initiated.
What if I entered my bank credentials on a fake site?
Call your bank's fraud line immediately — do not wait. Change your online banking password from a trusted device. Request that your bank review and potentially freeze outgoing Zelle transfers while the investigation is under way.