By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.

The Bank Confirmed It Was a Refund Scam

After reporting the incident, both my bank and PayPal’s security team confirmed what had happened.

The email was fraudulent.

The website was a phishing page.

The phone call was part of a coordinated social engineering attack.

The scammers had combined multiple techniques to make the fake refund appear completely legitimate.

Fortunately, because I questioned the final banking notification before approving it, no money left my account.

---

The Scam Was Carefully Planned

The investigator explained that the criminals didn’t rely on just one trick.

They used several stages:

1. A fake PayPal refund email.
2. A phishing website that captured my PayPal login credentials.
3. A fake customer support phone call.
4. Pressure to approve a real banking transaction disguised as “verification.”

Each step increased my confidence.

Each step made the next one feel more believable.

---

Why Refund Scams Work So Well

Unlike many scams that create fear, refund scams often create excitement.

People think:

“I’m getting money back.”

That excitement can reduce caution.

Victims focus on receiving the refund instead of questioning the process.

Cybercriminals understand human psychology.

That’s why many scams are designed around emotions rather than technology.

---

Warning Signs of Fake Refund Scams

Looking back, several warning signs were obvious.

🚩 A Refund You Never Requested

Unexpected refunds deserve verification.

If you don’t remember making the original purchase, investigate before taking any action.

---

🚩 Links Inside Unexpected Emails

Instead of clicking email links, open your browser and type the official website address yourself.

This simple habit can prevent many phishing attacks.

---

🚩 Requests for Banking Credentials

Legitimate payment providers generally do not ask customers to enter online banking usernames and passwords through refund pages.

Treat such requests with extreme caution.

---

🚩 Phone Calls That Create Urgency

Scammers often insist that:

• You must act immediately.
• The refund will expire.
• Verification must happen now.

Urgency is one of the strongest tools used in social engineering.

---

🚩 Banking Notifications That Don’t Match the Story

Always read banking approval requests carefully.

If the notification says you’re authorising a payment, don’t assume it’s part of receiving a refund.

Read every detail before approving any transaction.

---

How to Protect Yourself

The experience changed the way I handle online payments.

Today I follow a few simple rules:

• Never trust unexpected refund emails.
• Log in to PayPal or any payment platform by typing the official web address yourself.
• Enable two-factor authentication on important accounts.
• Read banking approval notifications carefully.
• Never allow someone on the phone to rush financial decisions.
• Verify unusual requests directly with the official company.

A few extra minutes of verification can prevent significant financial loss.

---

Frequently Asked Questions

Does PayPal call customers to help process refunds?

Policies may vary depending on the situation.

If you receive an unexpected call claiming to be from PayPal, independently verify it by logging into your official PayPal account or contacting customer support through the official website.

---

What should I do if I entered my PayPal password on a fake website?

Change your PayPal password immediately.

If you reused that password on other accounts, change those passwords as well.

Enable two-factor authentication if it isn’t already active.

---

What if I accidentally approved a fraudulent payment?

Contact your bank or payment provider immediately.

The sooner you report the incident, the sooner they can advise you on available protective measures.

---

Final Thoughts

The scammers didn’t hack my computer.

They didn’t break into my bank.

They didn’t exploit a software vulnerability.

They exploited trust.

They knew that seeing a familiar logo, hearing a professional voice and believing I was about to receive money would make me less cautious.

For a few minutes…

It almost worked.

The lesson I learned was simple.

Never trust an unexpected refund. Verify it first.

Because in cybersecurity, unexpected good news can sometimes be just as dangerous as unexpected bad news.

One careful decision can protect your account, your identity and your money.

---

About the Author

Jackson Godwin is a Cybersecurity Consultant specialising in Vulnerability Assessment and Penetration Testing (VAPT), Governance, Risk and Compliance (GRC), ISO/IEC 27001, PCI DSS, Cloud Security, AI Security, and Digital Risk Management.

Through JacksonTechnology.com.ng, he publishes cybersecurity awareness stories, ethical hacking tutorials, compliance guides, and practical online safety advice to help individuals and organisations recognise cyber threats, avoid online payment scams, and build safer digital habits.

His mission is to make cybersecurity practical, relatable, and accessible—one cyberstory at a time.