The Anatomy of an Online Refund Scam: Protecting Billericay and Brentwood Seniors
The internet makes everyday jobs easier, from checking local news to keeping in touch with family across Essex. But organised groups do target people in our communities, including older residents, with stories designed to rush a decision. The online refund scam, sometimes called a tech support scam, is still common.
At LaunchLayer, we think tech support should be clear, honest and calm. Here's how these scams usually work, so you can spot them.
1. How the Scam Works: Step-by-Step Breakdown
These messages start with something you weren't expecting. Knowing the usual pattern is a strong defence.
Step 1: The Alarming Pop-up Alert or Email
A bright warning appears on the screen, often in red, pretending to be from Microsoft, BT or Amazon. It may say the computer is infected, or that an unexpected subscription payment is about to leave your account. A large helpline number sits underneath, urging you to call straight away.
Step 2: The Helpful Operator Asking for Control
The person who answers is polite and keeps things moving. They say that fixing the problem, or processing a refund, means downloading a remote support tool such as AnyDesk or TeamViewer. This is the step to say no to. That software lets the caller see your screen and control the mouse, including access to files on the machine.
Step 3: Visual Trickery and Financial Demands
Once connected, they open confusing system windows and talk as if the computer is broken. They may ask you to log in to online banking to "check the refund", then hide the screen while they change the numbers in the browser, so it looks as if too much money was sent. Next comes a request for gift cards from a local shop, or an urgent bank transfer, to "put it right".
2. The Golden Safety Rules of the Internet
If an unexpected message appears on your screen, three habits will protect you from most of these calls.
Use a phone number you looked up yourself. Genuine companies such as Microsoft, Apple or your bank don't freeze your screen and ask you to ring a number on a pop-up. Use the number from the company's own website, or the back of your bank card.
Only share your screen with people you already know. If an unknown caller asks you to install software so they can see your desktop, hang up.
Check a real charge with someone you trust. If you're worried a genuine payment has gone through, close the browser and check with a family member you trust, or a local business you already use, before anyone else gets access to the machine.
Already Been Caught Out? Here’s What to Do
If you or a family member have already called a number from a pop-up like this, or a caller may have accessed the machine, start with the bank and the accounts. Cleaning the PC comes after that.
If money has left the account, or the caller could see your online banking, contact your bank straight away. The National Cyber Security Centre says to tell your bank as soon as you've lost money. You can also report it to Report Fraud, or to Police Scotland if you're in Scotland.
Change the password on your email and on your bank, and on any other account that used the same password, from another trusted device. Then turn on two-factor authentication (the NCSC calls this 2-step verification) for email and banking.
Removing remote-access software does not undo information or money that has already been taken. It does stop the caller controlling that machine. If you think the computer was accessed, visit our contact page. We'll look for remote-access programs that shouldn't be there, remove them, and clear out anything else they left behind. Virus, malware and scam removal is a fixed £69.