So, I get these types of emails all the time in my personal email. I rarely get anything through my work email, so I usually take note. This was an image, not text. I am curious who would call this number? I would love to have some fun with it if someone answered on the other end. Screenshot - not the actual image from the email.
8 Spice ups
Weird. I wouldn’t call, but I wonder how they trap you on this one… you are calling for a refund, so… maybe they ask for your social security number or something to confirm you are who you say you are?
2 Spice ups
cag16
(CAG16)
3
We got something very similar to this. The email started with “Bonjour”. As soon as I saw that I knew it was spam. Ours had a similar Geek squad PDF attached
3 Spice ups
DoctorDNS
(DoctorDNS)
4
That number appears to be toll-free. So call it - they are picking up the call.
Let us know how it goes.
2 Spice ups
Then your number is recorded and sold lol
5 Spice ups
cag16
(CAG16)
6
I’m guessing it’s gonna go something like this:
“Thank you very much for calling the refund department. Kindly share your CC number so we can refund the charge to your card. We will also be needing your ssn and birth date to confirm your identity. Kindly share those details with us. We are from Microsoft so everything ok”
13 Spice ups
And then they tell you that your refund will be processed in 4-6 weeks?
6 Spice ups
Someone needs a burner and call. 
2 Spice ups
Rod-IT
(Rod-IT)
9
Generally they will ‘convince [victim]’ to install a screenshare tool like anydesk, then ask you to login to online banking so they can refund, when they do this they blank the users screen, edit some HTML to make it look like they refunded (extra 00’s), then claim they will get in trouble with their boss, could you return the excess - which doesn’t exist, so [victim] ends up giving them money.
7 Spice ups
That might be the premise to Beekeeper.
3 Spice ups
Sadly many people are very easy to convince.
6 Spice ups
Actually probably simpler - give us the credit card number (and expiration, CVV) so we can put the money back on the card. Congrats! You just bought a bunch of Wal-Mart gift cards!
4 Spice ups
I used to get a kick out of calling these scam/phishing-related phone numbers from a burner phone and trolling the call center on the other end. Pretending to be clueless and playing along just enough to keep them going until they lost all patience was quite the ride! Witnessing low-life scammers get irate over someone who isn’t very tech-literate (or rather in my case, is pretending to be) still brings me a sweet profound sense of schadenfreude.
Also, as an aside- remember to be patient with people who are low in tech-literacy. I’m sure I’m mostly preaching to the choir here but it never hurts to reiterate.
4 Spice ups
Enough people fall for these that entire organizations with payroll, employees, etc. are funded and running day and night shifts to operate these scams.
Just wait until you can’t identify these by bad formatting/English…those days are coming.
2 Spice ups
zeor
(Zeor)
15
I was suspicious until I saw it was sent with regards.
2 Spice ups
My old boss fell for something similar to this (twice).
Like what @Rod-IT said, They will direct you to a remote access site and get control of your PC, use a fake page that looks like your bank account and do the ‘oops, I put too much money in, please help me not get fired…’
First Instance: Fake Refund Scam – Fortunately for him, (although he did fall for the initial ruse) he had presence of mind enough to check his bank account from another device and saw that there was no ‘extra money’ deposited.
Second Instance: Some kind of Crypto-transfer Scam – they got access to his PC and blanked out the screen to ‘Perform some Updates’. Apparently, they were in his account transferring Bit Coin. They had access to his Bank and his Crypto Wallet. Since he was in the office next to mine, I heard part of the conversation and was curious to what was going on. When I saw that they had control of his PC I pulled the network cable (and had to shut off the Wi-Fi).
We disrupted the transfer and he wound up with $10,000. of extra Bit Coin in his wallet. Unfortunately, the crooks were able to remove $10,000.00 from his bank account before he had the bank freeze it and change the account number.
However, if looking for silver linings, if the Bit Coin price increases, he’ll come out ahead in this…
2 Spice ups
Got a new one! This time from Norton. Same template used! haha
1 Spice up
