Refund Ruby
She helps herself to your help.
THREAT TYPE
THREAT LEVEL
Refund Ruby is all charm and calm confidence, the kind that makes you believe she’s doing you a favour. She promises an easy refund, then pulls you behind the curtain with screen sharing and remote access. Once she’s got the reins, your cursor isn’t yours anymore and your money rides out without so much as a goodbye.
The refund scam usually starts with a call, email, or pop-up claiming you’ve been overcharged, overpaid, or are owed a refund. Ruby then persuades the victim to install remote access software or start a screen-share so she can “process the refund.” Once connected, she may trick the victim into opening online banking, approving payments, or handing over verification codes. In some cases, she uses the remote connection to move money, add new payees, or capture details for later fraud.
REWARD
30,000
Ranger’s Rules for Riding Safe Online
-Never allow remote access or screen sharing for refunds. Legit companies do not need control of your device.
-Hang up and contact the company directly using the official website or number on your statement.
-Do not log into online banking while someone is watching or guiding you, even if they sound legitimate.
-Watch for pressure tactics like “do it now” or “your account will be locked” to push you into rushing.
-If you’ve already connected someone, disconnect immediately and contact your bank, then change passwords from a clean device.
