The Fake PayPal Refund That Emptied My Bank Account (Part 2)
July 30, 2026
Com 0
By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.
I Asked a Simple Question
Before approving the banking request, I stopped.
Then I asked the caller:
“Why does this notification say I’m authorising a payment instead of receiving a refund?”
There was a brief silence.
Then he answered confidently.
“That’s how our secure refund system works. The payment is only temporary and will automatically reverse once your refund has been verified.”
It sounded technical.
It sounded believable.
But it still didn’t make sense.
The Pressure Increased
The representative became more urgent.
He warned me:
“If you don’t complete verification within the next few minutes, the refund request will expire.”
Then he added:
“You’ll have to restart the entire process.”
The goal was obvious.
He wanted me to approve the transaction before I had time to think.
I Decided to Verify Independently
Instead of following his instructions, I told him:
“I’ll log in to my PayPal account directly.”
He immediately tried to stop me.
“Please don’t leave this page. It may interrupt the verification.”
That response confirmed my suspicions.
Legitimate companies generally do not discourage customers from accessing their official accounts through trusted channels.
The Real PayPal Told a Different Story
I ended the phone call.
Then I manually typed www.paypal.com into my browser instead of using the email link.
After logging into my real account, I checked:
Recent transactions.
Refund history.
Notifications.
Security alerts.
There was nothing.
No refund.
No cancelled payment.
No pending verification.
The entire story had been fabricated.
The Fake Website Had Already Collected My Password
Although I hadn’t approved the payment or entered my banking credentials, I realised something important.
I had already typed my PayPal username and password into the fake website.
That meant the criminals might already have my login credentials.
I immediately changed my PayPal password.
Then I enabled two-factor authentication for additional protection.
The Investigator Explained the Scam
Later, I spoke with a cybersecurity investigator.
He explained that refund scams rely on one powerful emotion:
Excitement.
People become less cautious when they believe they’re about to receive money.
Instead of worrying about losing money, victims focus on collecting an unexpected refund.
That shift in thinking makes social engineering much more effective.
The “Refund” Was Actually a Payment
The investigator explained the final stage of the scam.
The criminals wanted me to authorise a genuine payment from my own bank account.
They simply described it as a verification step.
If I had approved it, the money would have gone directly to accounts controlled by the criminals.
I wouldn’t have been claiming a refund.
I would have been paying the scammers myself.
I Was Seconds Away
Looking back, I realised how close I came.
The fake email.
The fake PayPal website.
The professional phone call.
Everything worked together to build trust.
One careful look at the banking notification saved me from making a costly mistake.
In the final part of this story, I’ll explain how refund scams work, reveal the warning signs everyone should recognise, and share practical ways to protect yourself from fake payment and refund schemes.
Continue Reading:The Fake PayPal Refund That Emptied My Bank Account (Part 3)
