High riskEmail

Fake Refund Email Scam

This scam emails that you are owed a refund and asks you to confirm bank or card details, or to accept a refund that is really designed to steal your money.

Quick verdict

Risk level
High risk
Scam type
Refund phishing scam
Main red flag
An unexpected refund offer that asks for your bank or card details to process.
What to do first
Do not share details. Verify any refund through the real company's account.

Understanding this scam

This scam emails that you are owed a refund and asks you to confirm bank or card details, or to accept a refund that is really designed to steal your money.

Email scams, or phishing, remain one of the most common ways criminals steal logins, payment details, and money. A convincing message imitates a brand or contact and steers you toward a fake login page, a malicious attachment, or a fraudulent payment.

If you take one thing from this guide, make it this: An unexpected refund offer that asks for your bank or card details to process. Do not share details. Verify any refund through the real company's account.

If your message looks slightly different, check the Fake Invoice Email Scam or the Fake Subscription Renewal Email, both are close cousins of this pattern. Every related guide lives in the Email Scams guides, and the scam checker can scan the text you received.

A typical example

Example pattern, not a real report
Example pattern: 'You are eligible for a refund of $89.50. To receive it, confirm your card details so we can credit your account: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

The tell here: An unexpected refund offer that asks for your bank or card details to process.

What the data shows

Most reported
phishing was the most common type of cybercrime complaint reported to the FBI in 2023
Source: FBI Internet Crime Complaint Center
$12.5B
total reported internet-crime losses in the US in 2023
Source: FBI Internet Crime Complaint Center

Warning signs

  • An unexpected refund for a purchase or service you do not recall
  • A request for your full card or bank details to 'process' the refund
  • A link to a page that is not the company's official site
  • A 'support agent' who asks for remote access to 'help refund' you
  • Pressure to confirm details quickly

Your safest response

  • Do not share bank or card details from an email prompt
  • Verify any refund by logging in to the real account directly
  • Report the email as phishing and delete it
  • Block the sender

If you have already engaged

  • Do not grant remote access to your device
  • Contact your bank if you shared card or account details
  • Change passwords for any reused logins
  • Watch your statements for unexpected transactions

What to avoid

  • Do not give remote access to 'process' a refund
  • Do not share full card or banking details
  • Do not let an agent guide you through bank transfers

You might also see

Medium risk Email

Fake Invoice Email Scam

This scam emails an invoice or receipt for something you did not buy, hoping you call a fake 'support' number or click a link to dispute it.

Created by Scam or Safe Editorial Team
Medium risk Email

Fake Subscription Renewal Email

This scam emails that a subscription is renewing for a large amount, hoping you call a fake support number or click a link to cancel and hand over details.

Created by Scam or Safe Editorial Team
High risk Bank & Payment

Fake Bank Alert Text Scam

This scam sends a text claiming suspicious activity on your account, then steers you to a fake login page or a 'fraud agent' who pressures you to move money.

Created by Scam or Safe Editorial Team

Questions people ask

Do companies need my card details to refund me?
Genuine refunds usually go back to the original payment method automatically. Being asked to confirm full card details to receive a refund is a scam sign.
An agent wants remote access to refund me. Is that normal?
No. Remote-access requests during a 'refund' are a common trick to move your money or steal details. Refuse and end contact.
How do I check if a refund is real?
Log in to the real retailer or service directly to see if any refund is genuinely owed, rather than trusting the email.
What if I shared my details?
Contact your bank immediately, change affected passwords, and monitor your accounts for unauthorised activity.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.