Refunded & Cancelled Event Scam
Scammers exploit event postponements and cancellations by impersonating organizers to phish for payment details under the guise of processing a refund.
Last reviewed: 5 July 2026
What this scam is
A refunded and cancelled event scam targets ticket holders in the aftermath of a genuine event cancellation, postponement, or rescheduling, when many buyers are expecting communication about refunds and are actively watching for it. Scammers exploit this predictable moment by sending fake refund notifications that closely mimic the real organizer's or platform's communication, phishing for payment card details or bank information under the pretext of processing money back to the customer.
This scam is distinct from most other ticket frauds because it targets people after they've already made a legitimate purchase, turning a genuine event disruption into a second opportunity for fraud layered on top of the original transaction. Because real refund processes do sometimes require customers to confirm or re-enter payment details, especially if an original card has expired, the phishing request doesn't always seem out of place.
The scam can affect large numbers of people simultaneously following a single event cancellation, since scammers can obtain lists of likely ticket holders through data leaks, public event pages, or by simply targeting anyone posting online about the cancellation.
How it works
Following a publicized event cancellation or postponement, scammers send emails or text messages closely mimicking the genuine ticketing platform's or organizer's branding, claiming that a refund is being processed and asking the recipient to 'confirm their bank details' or 'click here to receive your refund' through a link to a fraudulent page. The urgency of a real cancellation makes the timing highly plausible, since genuine refund communications are indeed expected around the same time.
The fraudulent page requests full card details, online banking credentials, or a small 'processing fee' or 'verification payment' framed as necessary to release the larger refund — a tactic that inverts the typical scam structure by asking for a small payment in order to supposedly receive a much larger one back. Some versions simply harvest card and banking details directly for later unauthorized use rather than requesting any payment at all.
Victims who provide their details either lose money directly through unauthorized transactions, or experience identity theft using the banking information collected, all while still believing they are waiting for a legitimate refund from the actual event cancellation, which delays them noticing the fraud since they attribute any confusion to the real refund process being slow.
Why this scam works
A genuine, well-publicized event cancellation creates a natural, expected reason for ticket holders to receive refund-related communication, which removes the usual suspicion around an unsolicited message asking for financial details. The framing of needing to pay a small fee to unlock a larger refund exploits the same psychology as advance-fee fraud generally, but feels more credible here because the underlying refund itself is genuinely owed, so victims aren't being asked to believe in a windfall — only in an administrative step toward money they already know they're entitled to.
The volume and timing of a real cancellation also means scammers can operate at scale very quickly, sending phishing messages within hours of a public cancellation announcement, before genuine refund processes have even begun, so their fake message may actually be the very first refund-related communication many ticket holders receive.
A typical pattern
A major event is cancelled at short notice, and within hours, ticket holders receive an email that closely resembles the ticketing platform's branding, stating that a small processing fee must be paid to release their refund due to a backlog of requests. Believing the refund is genuinely owed and the request plausible given the circumstances, several recipients pay the fee by card. No refund ever arrives, and the same card details are later used for unauthorized purchases elsewhere.
Common red flags
- Message asks for a fee or payment in order to receive a refund
- Link leads to a page requesting full card or online banking login details
- Sender's email or phone number doesn't match the platform's official contact channels
- Message arrives unusually quickly after a cancellation announcement, before official communication is expected
- Urgency or a deadline attached to claiming the refund
- Grammar, branding, or formatting slightly inconsistent with the genuine platform's usual communication
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Your event has been cancelled. A small processing fee of [amount] is required to release your refund of [amount].
Confirm your bank details here to receive your refund following the event cancellation.
Due to high refund volume, please verify your payment information to avoid delays.
Click here to claim your refund or opt for a credit voucher for a future event.
Common variations
- Fake 'processing fee' required before a refund can supposedly be released
- Phishing pages harvesting full card or online banking details under the guise of refund processing
- Fake customer service messages responding to public complaints about the cancellation
- SMS phishing claiming a refund requires 'confirmation' via a linked page
- Fake rebooking or credit voucher offers in place of a genuine refund, harvesting payment details
How to verify before you act
After any event cancellation or postponement, go directly to the platform or organizer's official website to check refund status rather than clicking links in emails or texts, and treat any request for a fee to 'unlock' a refund as an automatic red flag, since legitimate refunds are never conditioned on an upfront payment. Verify the sender's email address or phone number against the platform's officially published contact channels before providing any information.
If uncertain, contact the platform's customer service directly through contact details found independently, and ask them to confirm whether any refund communication has actually been sent to your account, rather than relying on the message itself as proof.
Payment methods used
- Card
- Bank transfer
Who is usually targeted
- Ticket holders of a cancelled or postponed event
- Buyers awaiting a refund
- Fans following public cancellation news
What to do immediately
- Do not click links or provide details in unsolicited refund messages
- Contact your bank immediately if you've already entered card or banking details on a suspicious page
- Verify refund status directly through the platform's official website or customer service
- Report the phishing message to the platform it impersonated
- Report to your national consumer protection or fraud reporting body
How to prevent it
- Check refund status directly through the platform's or organizer's official website, not via email links
- Treat any request for a fee to unlock or release a refund as fraudulent by default
- Verify sender email addresses and phone numbers against officially published contact details
- Contact the platform's customer service directly to confirm whether refund communication has actually been sent
- Avoid entering full card or banking details into a page reached via an unsolicited link
- Monitor bank statements closely in the weeks following any event cancellation you were affected by
Evidence to preserve
- The phishing email or text message, including sender details
- Screenshots of the fraudulent page if details were entered
- Bank statements showing any unauthorized transactions
- Any correspondence with the platform's genuine customer service
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Is it normal to be asked for a fee before receiving an event refund?
No. Legitimate refunds are never conditioned on paying an upfront fee to 'unlock' or 'release' the money. Any message requesting this should be treated as fraudulent regardless of how plausible the surrounding cancellation context seems.
How quickly do scammers send fake refund messages after a cancellation?
Often within hours of a public cancellation announcement, sometimes faster than the genuine organizer's own refund communication, which is precisely why the fake message can end up being the first refund-related contact a ticket holder receives.
What should I do if I already entered my card details on a fake refund page?
Contact your bank or card issuer immediately to flag the card for potential fraud and consider requesting a replacement, then monitor your statements closely for unauthorized transactions in the following weeks.