Should I just delete and forget this dodgy email? Or phone them back?

November 7, 2024 8:30 AM

An obviously scammy email from one "[e-mail]" just invaded my inbox, claiming they were charging me $298.45 to renew my order from "Geek Tech". Utter bollocks. However, they included a customer service number: eight-oh-four 404 9987, to call if "I did not recognize this transaction".

If this is Part B of the scam, i.e. manipulating me to confirm to them that I'm a real person, what's the point?

Should I call the customer service phone #? Reply to the email in some satisfyingly angry/letting-off-steam post-election manner. Or just delete it all and move on?

Thanks for any advice

posted by Jody Tresidder to Computers & Internet (16 answers total)

When you call they will likely ask you to confirm your card number or other finance info for the refund. Delete and move on.
posted by bfranklin at 8:33 AM on November 7 [14 favorites]

Delete and move on. They are going to ask you to confirm your account number, or credit card number, or something else. They won't be able to match your email address with this phone call unless you give it to them. They may or may not want a good phone number.
posted by soelo at 8:33 AM on November 7 [6 favorites]

I’d worry that it was somehow a pay-to-call number. I might be checking my credit card statement or even calling my credit card co if I thought it was more than phishing.
posted by clew at 8:34 AM on November 7 [1 favorite]

The general rule is: don't engage with scammers. It gives them a second chance to try to scam you (you may think you're scamproof; you're not), and it also identifies you as someone who's more likely to respond to scams generally.
posted by praemunire at 8:36 AM on November 7 [10 favorites]

Assume that all information in the email is fraudulent or there to manipulate you.

This email is clearly phishing, but if it was less clear, and if the email purports to be from a company whom you have an actual relationship with, then you could go to a DIFFERENT source (i.e., the company's official website) to get their number and call them to discuss. But, there is no benefit from engaging with anything in that email.
posted by bruinfan at 8:40 AM on November 7 [2 favorites]

Why would you trust a fake number from a fake email? Don't get involved.
posted by tiny frying pan at 8:57 AM on November 7 [8 favorites]

The phone number is where they really pull off the scam. They get you to provide them with a bunch of identifying information to "confirm your identity" and then they maybe do things like log into your bank account with the information you just gave them, and say something like "you're about to get a text with a code to confirm your identity. Read me that code when you get it." And then they have logged all the way into your account(s) and can do whatever they want.
posted by fedward at 8:59 AM on November 7 [10 favorites]

Echoing fedward - the phone number is not Part B of the scam, it is the core of the scam. They want you to get freaked out by the email and call them in a panic. Once you call, they will do everything possible to seem like they can help you, but they just need some information from you, like your credit card number, bank account number, security code off the back of the card, maybe your SSN, etc. They'll keep poking you until either they get enough info to steal real money from you, or you figure out that they're part of the scam. They may play as helpful, disinterested, or even threatening, but their goal is the same.

And the general advice - if there's ever a hint of fraud/scammyness, do not EVER call someone using a number that they provided to you as part of the current incident. If it's "from" your bank, call them on the number on the back of your card, or printed on your statements. If necessary, look it up on their website, but don't just call whatever number google pops up, as some scammers have been able to get google to turn up their scam number instead - make sure you're really on the real website of whatever institution you need to call. And if it's a third-party seller who claims that they are about to charge you, and you have never had business with them before, just wait until the charge hits your credit card/bank account (hint - it almost certainly won't), and then take it up with your bank/credit card company as fraudulent.
posted by yuwtze at 9:49 AM on November 7 [3 favorites]

Response by poster: Thank you - illuminating and incredibly helpful advice. Also thanks for taking the time to answer, all of you.
posted by Jody Tresidder at 10:18 AM on November 7 [3 favorites]

I bet if you call them one of the first questions they'll ask is if you have a Mac or Windows machine. That's so they can instruct you to download the software they'll use to remote into your computer.
posted by phunniemee at 10:21 AM on November 7 [1 favorite]

Best answer: I got a telephone spam call like that
If you authorized this $600 transaction do nothing, if not please hold and press 1 to speak with someone.
I did ,just for fun.

What happens is
How can I help you.
Ok , thank you I just need some information
I need your name and card number blah blah

The scam is when you call ,they need details to help you.
posted by yyz at 11:18 AM on November 7 [1 favorite]

I'd suggest replacing part of the phone and email in the question with "xxx" so they are not clickable. On my phone's browser accidentally tapping that phone no would start a call 😬
posted by zippy at 6:16 PM on November 7 [2 favorites]

If you google or search Youtube for "refund scam" you can find tons of examples of how this scam works. Delete the message and move on.
posted by mmoncur at 3:49 AM on November 8 [1 favorite]

Absolutely do not call that number.
posted by firefly5 at 3:55 AM on November 8

Never interact with spammers. It lets them know they've reached a "live" number and will use endless tactics to get through to you. Block. Delete. Over and Over.
posted by SoftSummerBreeze at 8:29 AM on November 8 [1 favorite]

Mod note: Slightly edited the post to mangle the phone number to prevent accidental clicks/calls.
posted by Brandon Blatcher (staff) at 4:49 PM on November 28