Fake Game Refund Support Scam

This scam impersonates the customer support or billing department of a game publisher, console maker, or app store, reaching out to a player with a claim that they were accidentally overcharged, double-billed, or enrolled in a subscription by mistake. The message offers to process a refund, but the actual goal is to manipulate the player into making a payment, granting remote access to their device, or handing over financial account details.

The scam plays on the fact that billing errors do occasionally happen with real platforms, and players have often initiated genuine support conversations about a charge before, making an unsolicited contact along similar lines feel plausible rather than immediately suspicious.

Because the scam frames itself as the platform giving money back rather than asking for it, victims tend to lower their guard in ways they would not for a typical unsolicited payment request, which is precisely why the refund framing is used.

Contact usually begins with an email, text message, or pop-up claiming to come from a game publisher's billing team, stating that a recent transaction was processed incorrectly and that a refund of a specific amount is due. The message includes a link to a 'refund portal' or a phone number to call to 'process' the refund.

If the victim calls the number, they are connected to someone posing as a support agent who asks them to install remote access software so the agent can 'see the account and issue the refund directly'. Once remote access is granted, the scammer either manipulates the victim's own banking app to make it look like an overpayment was refunded by mistake, or directly initiates a transfer out of the account while the screen displays a manipulated or blank view.

In a variant that avoids remote access software, the fake refund portal simply asks the victim to enter their card or bank account details 'to receive the refund', which are then used to make unauthorized charges rather than to send any money back. Some versions ask the victim to purchase gift cards and read the codes over the phone as a way to 'verify their identity' before the refund can be released, a request that has nothing to do with any real refund process.

People are generally receptive to being contacted about money coming back to them, which lowers the skepticism that would normally accompany a request involving payment details or remote device access. The urgency framing — that a refund window is closing, or that the overcharge needs correcting quickly to avoid further erroneous charges — discourages the victim from taking time to verify the contact independently.

The involvement of a live person on the phone, rather than just an email, adds a layer of social pressure and apparent legitimacy, particularly when the caller uses natural, confident language and appears to have some plausible-sounding transaction details, which may simply have been guessed or scraped from a data leak rather than genuinely known.

The victim receives a message claiming they were double-charged for a recent in-game purchase and are due a refund, with a phone number to call. On the call, a person identifying as billing support asks the victim to install a remote access tool so they can 'see the transaction and process the refund directly'. Once connected, the caller navigates the victim's banking app under the guise of processing the refund, but instead initiates an outgoing transfer, telling the victim not to worry about the number showing on screen because it is 'just the refund system'. The victim later discovers money missing rather than a refund received.

Our billing system accidentally charged you twice for your recent purchase. Call [phone number] to claim your refund.

REFUND NOTICE: A duplicate charge of [amount] was applied to your account. Click here to process your refund.

This is billing support following up on your case. I'll need to access your screen to issue the refund correctly.

To verify your identity before releasing the refund, please read me the code from a [amount] gift card.

Your refund of [amount] is pending, but our system shows a delay — please confirm your card details to release it.

Never call a number or click a link provided in an unsolicited refund message. Instead, go directly to the game publisher's or platform's official website and use the contact details listed there, or check the payment history in your own account for any actual charge referenced in the message.

A legitimate refund from an official platform is processed automatically to the original payment method without requiring the customer to install software, provide gift card codes, or share full card details over the phone. If a supposed support agent asks for remote access, gift card codes, or a wire transfer to complete a refund, end the contact immediately, since none of these are used in genuine refund processes.