It started with a phone call.

A retired accountant from Brooklyn sat down at her laptop one July afternoon when her computer suddenly froze. Then her phone rang. The caller claimed to be from Microsoft.

“We’re sorry,” the man said. “We let a big virus through. We need to refund you the premium you paid for your protection.”

The woman had, in fact, paid for antivirus software, so the story made sense. The caller sounded professional and calm. He told her he was issuing a $10 refund — but then called back, panicked.

“Oh my god, we made a huge mistake,” he said. “We accidentally deposited $100,000 into your account. You’ve got to get that money out right away.”

When she checked her online banking, she saw an extra $100,000 in her account that hadn’t been there the day before. Wanting to do the right thing, she asked how she could help fix the error. The caller said he could arrange for the funds to be returned, but because of Microsoft’s refund policies, the money would need to be returned in cash — to avoid getting him “in trouble.”

Again wanting to do the right thing, she followed his instructions. She went to her local bank branch and withdrew $100,000 in cash. The bank teller, suspicious, asked if she was under duress. When she said no, the withdrawal was approved.

Next, the caller said Microsoft would send a courier to pick up the money. “He will say to you that he is Andy, and the code word is ‘red,’” he told her.

A few hours later, she met “Andy” in person and handed him an envelope stuffed with $100,000 in cash — a third of her life savings.

It wasn’t until later that she learned the truth. The so-called refund wasn’t a deposit at all. The scammers had already gained access to her accounts and transferred her own money from one account to another — creating the illusion of a mistaken refund.

Based on reporting from CBS News New York.

Lessons Learned

The goal of this newsletter is to expose the playbook scammers use — so when they try it on you, you’ll recognize it in real time. This Brooklyn woman’s story shows how even smart, experienced people can be fooled when urgency, authority, and secrecy are used in just the right combination.

Don’t trust caller ID. Anyone can make their number appear as “Microsoft,” “FBI,” or your bank. Caller ID is not proof of who’s calling.

Hang up and verify. If you ever get a suspicious call, end it immediately and contact the company yourself using a verified number — the one on the back of your credit card, your account statement, or the official website. If you’re unsure, go to your bank in person and speak to a branch manager.

Slow down. Scammers rely on urgency to override your judgment. Real refunds, transfers, and investigations take time. If someone says “you need to act right now,” that’s your cue to stop.

Cash is a dead giveaway. It’s 2025 — no legitimate business or government agency will ever ask you to transact or return money in cash.

Never lie to your bank — use them as a resource. Scammers often tell victims to keep things secret. That secrecy is what lets the scam succeed. Be honest. Your bank can only protect you if it knows what’s going on. If something feels off, go in person, explain the situation, and ask for help before moving any funds.

Verify deposits in person. If money suddenly appears or disappears from your account, visit your branch and ask the manager to confirm what happened before transferring or withdrawing anything.

Want to help others stay safe?

Protect your loved ones from becoming victims of this scam by sharing on Facebook. Click to share.

Did someone forward this to you?

Subscribe here for real stories to protect yourself.

Keep Reading