Tech Support Refund Scam: The Fake Overpayment Behind $42 Million in Elder Fraud

A tech support refund scam starts with a fake “support” charge and ends with a fake refund: the scammer, controlling your computer remotely, makes it look as if you were overpaid and asks you to send the difference back. In one federal case, the FBI identified over 500 victims and over $42 million in losses. The safe rule is simple: never send money back to anyone for a refund mistake.

What happened

According to the U.S. Attorney’s Office for the Southern District of California, San Diego resident Victor Marion pleaded guilty on January 15, 2026, to mail and wire fraud conspiracy and money laundering conspiracy.

He had been charged in November 2025 along with 21 others. NBC San Diego reported that the FBI made 19 arrests that month.

Prosecutors said call centers in India and Dubai ran the scheme. The FBI identified more than 500 victims and more than $42 million in losses.

How the call went

Based on the court release, the scam followed these steps:

• A pop-up appeared on the computer, telling the person to call “Microsoft” or “McAfee” support.
• The fake support agent charged a few hundred dollars for a service.
• Later, the victim was told a refund was owed.
• With remote desktop access, the scammers made it look as if tens of thousands of dollars had been refunded by mistake.
• The victim was asked to mail or wire back the “extra” money.

The overpayment was never real. The money the victim sent back was their own.

Red flags

• A pop-up that tells you to call a support number.
• A caller asking to connect to your computer remotely.
• An unexpected refund, especially one that seems too large.
• A request to send back the “extra” by mail, wire or gift card.
• Pressure to send the money back right away.

What would have stopped it

• Not calling the pop-up number. Close the browser or restart the computer instead.
• Never giving remote access to someone who contacted you, or whom you reached through a pop-up.
• Checking the bank balance yourself, by calling the bank on the number on the back of the card, not by looking at a screen the caller controls.
• A firm rule: a real company fixes its own refund errors. It never asks you to mail cash or wire money back.

If this happens to your family

• Disconnect the computer from the internet and stop the remote session.
• Call your bank on the number on the back of your card and report any transfers.
• If gift cards were used, contact the gift card company right away.
• Report it at ReportFraud.ftc.gov and at ic3.gov.
• Call the National Elder Fraud Hotline at 833-FRAUD-11 (833-372-8311), Monday to Friday, 10am to 6pm ET. Scammers sometimes pretend to be this hotline, so dial the number yourself.
• The AARP Fraud Watch Network Helpline, 877-908-3360, can help with next steps.
• Have someone you trust check the computer for remote access software.

Refund scams usually involve long phone calls with the “agent.” A check on unknown calls, such as FamilyDefender, can warn the parent during the call and alert a family member who can step in.