Post‑Holiday Refund Scam to Watch Out For
As people rush to return gifts and track refunds after the holidays, scammers move in quickly, exploiting the high volume of legitimate returns. January is consistently one of the busiest months for return fraud, and this year’s tactics are more convincing than ever. One of the most common methods involves fake refund or return-issue messages, delivered through email or text, claiming that an issue has occurred with a recent return. These messages are designed to trigger urgency and fear, pushing you to act without stopping to verify. Typical phrasing includes:
- “Your refund couldn’t be processed.”
- “We need additional info to issue your refund.”
- “A charge must be reversed immediately.”
These communications frequently reference familiar retailers or real purchases to enhance credibility. Scammers mimic the logos, language, and timing of legitimate customer service notifications to lure victims into clicking malicious links or providing sensitive information, such as card numbers, login credentials, or authentication codes.
In late 2025 and into the 2025–2026 holiday season, New Yorkers experienced a sharp rise in fake refund and return‑issue scams specifically tied to holiday shopping. Security analysts noted a surge in fraudulent messages claiming that a gift return couldn’t be processed or that “additional steps” were required to complete a refund. Read more about this and other trending scams here.
How to Stay Safe
- Verify refunds directly through the retailer: Never click on links in refund‑related messages. Instead, log in to your retail account or app to check the status of your return.
- Slow down when a message sounds urgent. Scammers rely on panic. If a message insists that you must act immediately, that’s a major red flag.
- Check sender details carefully. Look for misspellings, odd domains, strange phone numbers, or anything that doesn’t match the retailer’s official contact information.
- Never share sensitive information in response to unsolicited contact. Legitimate retailers will not ask for account numbers, PINs, passwords, or verification codes by text or email.
- When in doubt, contact the company directly. Use a verified customer service number or the retailer’s official website, not the one listed in a suspicious message.
As we settle back into routine after the holidays, a little extra caution goes a long way. Scammers rely on chaos and distraction, but by staying aware and double‑checking anything suspicious, we can keep ourselves and our communities safer. Here’s to a smart, secure start to the new year.
Rakesh Kumar
AVP of IT Infrastructure Services and Chief Information Security Officer
Information Technology
Fashion Institute of Technology
333 Seventh Ave, 13th floor
New York, NY 10001
(212) 217-3403
About Cybersafe
The Division of Information Technology is dedicated to protecting the FIT community from the latest cybersecurity threats by providing warnings and creating awareness through training and information-sharing. Visit fitnyc.edu/cybersafe for more information. And stay tuned for emails from [email protected] for the latest from the Cybersafe campaign at FIT.