Refund and Overpayment Scams: The Warning Sign

Being told you're owed a refund you never requested, or that a buyer or employer accidentally overpaid you, is not good news to act on quickly; it's the setup for one of the most consistent scam patterns in circulation. The mechanism is simple: a payment arrives (a check, a payment-app transfer, or a claimed bank transfer) for more than expected, and the sender asks you to send back the difference, usually right away and usually through a method that's hard to reverse. By the time the original payment turns out to be fake or reversible, the money you sent back is already gone. The tell here is the direction of the request, not the specific story attached to it: legitimate refunds and overpayment corrections never work this way.

How it plays out

The pattern shows up across several payment methods, and the specific vehicle matters less than the shape of the request:

• A check or money order arrives for more than the amount owed, with instructions to deposit it and send back the excess. The check later bounces, sometimes days after it was deposited, after the "excess" has already been sent through an unreversible method.
• A payment-app transfer (rather than a check) shows up as an accidental overpayment, with a request to send the difference back through the same or a different app. Payment-app transfers can sometimes be reversed or disputed by the original sender once the scam is discovered, leaving the recipient without the funds they sent back and, in some cases, without the original payment either.
• A claimed bank transfer refund arrives, or is claimed to have arrived, with a request for account details or a portion sent back to "correct an error," often impersonating a government agency, a utility, or a company you actually do business with.

Why it works: the payment looks real before it's confirmed to be fake

The core reason this scam succeeds is timing. A check can look and behave exactly like a real one, and even clear an initial bank deposit, before it is later identified as fraudulent, sometimes days later. By that point, the money sent back in response to the "send the difference" request is already gone, and the bank holds the recipient responsible for the full amount of the bounced check, not just the difference. The same timing gap applies to payment apps and claimed transfers: the appearance of money arriving happens well before its legitimacy is actually confirmed.

The same trick as an advance-fee scam, told backwards

This pattern is the mirror image of the one covered in our advance-fee scam guide. An advance-fee scam asks you to pay first to receive a larger amount later. A refund or overpayment scam reverses the framing: you're told you've already received money, and now must send some back. Both rely on the same underlying leverage, using the appearance of a financial transaction to get you to move real money before you've had a chance to verify anything.

What a legitimate refund or overpayment correction actually looks like

Real businesses and government agencies do not ask you to pay money, wire funds, or share your bank account number in order to receive a refund. If a legitimate overpayment genuinely occurs (a rare event, but not impossible in ordinary commerce), the correct response is to contact the original sender's business directly through a verified channel, not the number or link included in the message you received, and let them cancel or correct the transaction themselves rather than sending money back yourself.

Why this scam often targets sellers and freelancers specifically

This pattern shows up especially often in online marketplaces, freelance platforms, and rental listings, since these situations naturally involve one party sending money to another before a transaction is fully complete. A buyer "accidentally" overpays for an item and asks for the difference back before the seller has had time to confirm the original payment cleared. A prospective tenant sends an inflated deposit and asks for a refund of the excess before a lease is signed. A client of a freelancer sends an overpayment and requests the difference urgently, often citing a scheduling reason for the rush. In each version, the transactional context (a real sale, a real rental, a real freelance job) provides cover that makes the request feel like a normal part of doing business rather than a red flag.

What to do if you're contacted about a refund or overpayment

1. Never send money back in response to an unexpected overpayment or refund notice, regardless of how the payment appears to have already cleared.
2. Wait for your bank to confirm a check or transfer has fully and finally cleared before treating it as real money, which can take longer than the initial "available balance" suggests.
3. Contact the claimed sender directly through a number or website you find independently, not one provided in the message, to verify the transaction.
4. If you've already sent money back, act quickly. Our guide on what recovery actually looks like covers realistic reversal options by payment method, and our reporting guide covers where to file a report in your country.

The difference a few days can make

Because the real risk in this scam is a timing gap, the amount of time between "the payment appears in my account" and "my bank confirms it has fully and finally cleared" is worth understanding concretely rather than assumed away. Many banks display a check deposit or an incoming transfer as an available balance well before the underlying payment has actually been verified as good, sometimes days sooner. That gap is not a flaw in your bank's system so much as a normal part of how payment clearing works, and it is precisely the window this scam is built to exploit. Waiting an extra few days before acting on an unexpected payment costs you very little; sending money back during that window and discovering the original payment was fake costs you the full amount.

A note on how to use this

This page describes a scam pattern in general terms across common payment methods; specific bank and payment-app policies on holds, clearance times, and reversals vary, so confirm your provider's current process directly. Please also read our full Disclaimer.

Frequently asked questions

Someone paid me too much and wants some back. Is that always a scam?
Not always, but treat it with caution regardless. Verify the sender independently before returning any money, and never send funds back based solely on a payment that appears to have cleared, since holds can be reversed later.

Why does the check clear if it's fake?
Banks often make funds available before a check has been fully verified as legitimate, which can take longer than the initial deposit. The check can bounce well after you've already sent money back.

Is this the same as an advance-fee scam?
It's the same underlying mechanism run in the opposite direction. Our advance-fee scam guide covers the "pay first" version; this page covers the "you were overpaid, send some back" version.

What should I do if I already sent money back on a scam I now suspect?
Contact your bank or payment provider immediately to ask about reversal options, understanding that recovery odds vary by method, then file a report with your country's fraud-reporting body.

Aron Benjamin