How Florida retiree lost $200K in fake PayPal refund scam

Brian Oliver is retired, crisp and financially savvy capable to person a stock-and-bond portfolio worthy hundreds of thousands of dollars. He is not the benignant of idiosyncratic you representation getting scammed. That is precisely wherefore scammers picked him.

What happened to Oliver, 85, is the benignant of communicative that makes your jaw drop, and your tummy crook astatine the aforesaid time. It started with a routine-looking email and ended with a container of golden coins rolling distant successful the backmost of a achromatic Mustang. In between, Oliver mislaid $200,000 and astir fractional of his status savings.

He told his communicative connected my Beyond Connected podcast astatine getbeyondconnected.com, on with Detective Justin Torres of the Gainesville Police Department successful Florida. What they shared unneurotic is adjacent parts chilling and clarifying.

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, sojourn CyberGuy.com – trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join. 

BEWARE FAKE CREDIT CARD ACCOUNT RESTRICTION SCAMS

Brian Oliver shares however a routine-looking email pulled him into a blase refund scam that outgo him $200,000. (Sebastian Gollnow/picture alliance)

It each started with a PayPal refund scam email

Brian got an email that said PayPal owed him money. It was not a chaotic claim. He had dealt with PayPal earlier and figured, "Maybe they recovered immoderate wealth for me." So helium responded. The email included a telephone number, and that fig connected him to a antheral who called himself Andrew Johnson.

"Yeah, we person $450 for you. Type successful the fig 100 connected your machine and we'll get it started."

Brian typed 100. Andrew instantly said helium had made a mistake: "Oh no, you enactment successful 10,000."

Brian pushed back. He said helium did not benignant 10,000. Andrew told him to cheque his Bank of America account. Brian opened it, and determination it was: $10,000 sitting successful his checking account.

Except it was not real. The scammers had someway mirrored his bank's website. What Brian saw looked precisely similar his existent Bank of America page, implicit with a caller equilibrium and a telephone fig embedded successful the "Contact Us" section. That fig was fake, too.

Brian called it. A antheral named Josh answered, identifying himself arsenic a Bank of America representative. He told Brian that the lone mode to instrumentality the wealth without triggering a $3,500 taxation punishment was to retreat $10,000 successful currency and provender it into a crypto ATM.

How the PayPal refund scam tricked Brian

Oliver had ne'er heard of a crypto ATM earlier that day. Josh helpfully told him precisely wherever to find one. It was successful a sketchy portion of town, and Oliver walked successful carrying $10,000 successful his pocket.

"I'm connected my knees, connected a cement floor, and I'm 85," Oliver said.

He fed 1 100 $100 bills into the machine, measure by bill, watching implicit his enarthrosis the full time. Some bills got kicked backmost out. He fed them successful again. When the instrumentality yet accepted each of them, helium photographed the receipt and sent it to Andrew Johnson, conscionable arsenic helium had been instructed.

Then Oliver went location and told Andrew it was done. Andrew told him they inactive had to instrumentality attraction of his refund. He told Oliver to benignant successful the fig 200.

FAKE PAYPAL EMAIL LET HACKERS ACCESS COMPUTER AND BANK ACCOUNT

Oliver typed it. Andrew's effect came fast: "Oh my God, my brag is going to termination me. It's $200,000 we've transferred to your account."

This benignant of scam is becoming much common, and it often involves criminals impersonating trusted platforms similar PayPal.

"PayPal does not tolerate fraudulent activity, and we enactment hard to support our customers from evolving phishing scams," a spokesperson for PayPal told CyberGuy. "We ever promote consumers to larn however to spot the informing signs of communal fraud, including our tips connected the PayPal Newsroom for identifying phishing emails that effort to impersonate trusted brands. We further urge contacting Customer Support for assistance done authoritative channels specified arsenic the PayPal app and our Contact Us webpage, and ne'er responding to suspicious, unexpected emails."

How the scam escalated to $200,000 successful gold

Oliver opened his slope relationship again. The fake mirrored tract showed $200,000 sitting there. Josh Wilson was backmost connected the telephone with a caller plan. This time, the crypto ATM would not enactment due to the fact that the magnitude was excessively large. Oliver needed to liquidate $200,000 from his banal and enslaved portfolio, person it to currency and usage it to bargain golden coins.

Oliver protested. He told them to conscionable reverse the transfer. They said it was impossible.

"This is my status money. 50% of my status money," helium said.

The scammers told him not to respire a connection to anyone. Josh specifically warned him that telling his broker the information could trigger taxation problems. So Oliver called his broker and said helium had his oculus connected a portion of existent property helium wanted to flip. The broker processed the merchantability without question.

YOUTUBE JOB SCAM TEXT: HOW TO SPOT IT FAST

Oliver went to a golden coin store, wrote a cheque for $198,560 and waited 2 to 3 days for it to clear. Andrew Johnson stayed successful regular interaction the full time.

When the golden was ready, Johnson gave Oliver 1 last instruction. A courier would travel to his doorway to prime up the box. Before handing it over, Oliver should inquire the courier for a password. The password was "blue."

The courier arrived. He was driving a achromatic Mustang. He said the connection blue. Oliver handed implicit the box.

"He told maine the password," Oliver said. "I handed the box, and disconnected went my $200,000."

The infinitesimal Brian Oliver realized it was each a scam

The time aft the courier left, Andrew Johnson called backmost with urgency. He told Brian Oliver different $200,000 had landed successful his account, and they needed to bash the full happening implicit again. That was the infinitesimal it broke.

"That's erstwhile I came retired from nether the ether of this scam," Oliver said. "And I said, this cannot beryllium right."

He instantly called the Gainesville Police Department.

The high-stakes sting that brought down a scam courier

Detective Justin Torres of the Gainesville Police Department took the telephone and started moving the lawsuit immediately. The scammers had asked Oliver for photos of the golden and the acquisition receipt, which gave instrumentality enforcement astir a time and a fractional to acceptable up an cognition earlier the courier was scheduled to return.

Detective Torres pulled successful 4 officers from the department's Gun Violence Initiative unit, a squad of intermediate detectives trained for precisely this benignant of boots-on-ground work. They acceptable up covert and marked vehicles astir Oliver's residence astatine a cautious distance.

"It was beauteous precocious strength due to the fact that I'm listening to Mr. Oliver's speech with Andrew," Torres said. "And I'm besides trying to beryllium a bully region distant to perceive to my vigor and beryllium capable to broadcast what I request to to the different officers connected the outside."

The scammers were suspicious. They kept pushing Oliver to beryllium much compliant. Oliver pushed back. The extremity was to support them connected the enactment agelong capable for the courier to amusement up. The courier, a antheral named Seth Wayne, drove successful from Tampa. The officers waited. When helium arrived, they arrested him. The lawsuit went to trial. Seth Wayne received an 18-year situation sentence.

A national assemblage has since convicted a 2nd courier successful the aforesaid scheme. Atharva Shailesh Sathawane, 22, an undocumented migrant from India, was recovered blameworthy of conspiracy to perpetrate ligament fraud and wealth laundering, with Brian Oliver among his victims.

Sathawane was arrested aft the Gainesville Police Department acceptable up a 2nd sting cognition astatine Brian's home. Court documents showed Sathawane was progressive successful much than 30 transactions crossed aggregate states, contributing to astir $8 cardinal stolen from aged victims. He faces up to 20 years connected each count, with sentencing scheduled for Dec. 16 successful Gainesville, though helium is appealing his conviction.

How refund scams are hitting aggregate victims

The scam began with a convincing connection and rapidly escalated arsenic criminals guided Brian Oliver measurement by measurement done fake relationship activity. (Halfpoint/iStock/Getty Images)

Ten different victims testified astatine Seth Wayne's trial. They had travel from each implicit the authorities of Florida, and their stories made Oliver furious.

Some had received fake apprehension warrants, official-looking documents claiming their identities had been tied to weapon running. They were told the lone mode to wide their names was to propulsion their savings and bargain gold, which would beryllium placed successful a peculiar locker successful Washington, D.C., until their names were cleared.

One unfortunate mislaid $1.8 million. Another mislaid $4.9 million. A 3rd pistillate mislaid implicit $1 cardinal crossed 2 abstracted pickups by the aforesaid courier. Her hubby was successful hospice attraction successful Florida portion each of this was happening. She drained her full beingness savings, sold her condo and had to determination successful with her girl and son-in-law successful Alabama, leaving her dying hubby behind.

Where the wealth from refund scams really goes

Once the golden oregon currency leaves a victim's hands, betterment is astir impossible. Most of Seth Wayne's deliveries went to parking tons astatine McDonald's oregon buying centers, wherever helium handed the wealth straight to a controller. One pickup went to a jewelry store, wherever an worker came extracurricular to cod it. That transportation is inactive nether progressive probe by the IRS and FBI.

The telephone centers moving these operations are overseas. Higher-level couriers successful the United States are inactive being investigated. The afloat web is, arsenic Detective Torres enactment it, "very intricate" and "very complicated."

Seth Wayne himself was a mid-to-upper-level courier. He was besides paying different couriers and compensating his handler. When investigators downloaded his compartment telephone aft a judge-approved hunt warrant, they recovered grounds that helium had researched precisely what helium was doing earlier deciding the wealth was worthy the risk.

SCAMS THAT AREN'T ILLEGAL (BUT SHOULD BE)

The defence of "willful blindness," the thought that a courier tin assertion ignorance and flight responsibility, nary longer holds up successful Florida courts. Seth Wayne recovered that retired the hard way.

For a deeper look astatine what Oliver went through, you tin perceive the afloat communicative connected my Beyond Connected podcast astatine getbeyondconeccted.com.

How to enactment harmless from refund scams

Detective Torres laid retired the astir important reddish flags clearly, and Oliver added a fewer from achy idiosyncratic experience. Here is what some of them privation you to know.

1) Hang up connected urgency

Scammers manufacture unit due to the fact that it works. If idiosyncratic connected the telephone is telling you that you indispensable enactment close now, that is not a existent emergency. That is simply a tactic. Torres enactment it directly: "They privation to marque you judge that you person to bash each this close now."

2) Never telephone the fig they springiness you

If idiosyncratic calls claiming to beryllium from PayPal, your slope oregon a instrumentality enforcement agency, bent up and find the existent fig yourself. The fig embedded successful Oliver's fake slope website looked wholly legitimate. It was not.

3) Pause for 10 seconds

Literally 10 seconds. Detective Torres confirmed what galore information experts say: "If you intermission these scams for conscionable 10 seconds, galore of them volition conscionable autumn apart." A scammer who is pushed backmost adjacent somewhat volition often overreact, and that absorption volition consciousness wrong.

4) Isolation is the biggest reddish flag

The infinitesimal idiosyncratic connected the telephone tells you not to archer a household member, person oregon neighbour what is happening, stop. That acquisition exists for 1 reason: to forestall you from getting assistance earlier they get your money. "Once you commencement proceeding that isolation conversation, that is the biggest reddish flag," Torres said. "You request to bent up the phone."

5) Gold is ever a scam signal

Oliver made this 1 simple: "If you're told to spell bargain gold, the lone crushed they archer you to bargain golden is due to the fact that it tin ne'er beryllium traced. It's a scam." No morganatic company, authorities bureau oregon fiscal instauration volition ever inquire you to bargain golden coins and manus them to a stranger.

6) The courier astatine your doorway means stop

If you person already bought golden and idiosyncratic is coming to your location to prime it up successful a box, Oliver's proposal is direct: "Stop close there. It's a scam."

7) Never determination wealth to hole a 'mistake'

If idiosyncratic claims they accidentally sent you wealth and asks you to instrumentality it, halt close there. Real companies hole errors connected their ain systems. They volition not inquire you to retreat cash, bargain crypto oregon acquisition golden to close a transaction.

8) Verify your relationship connected your ain device

If you request to cheque your slope account, usage your authoritative banking app oregon benignant the website yourself. Do not spot links, screens oregon telephone numbers provided during a call. In galore cases, scammers make fake sites that look identical to the existent thing.

9) Be wary of step-by-step instructions

Scammers often enactment connected the telephone and usher you done each move. That level of power should rise concern. Legitimate companies bash not locomotion you done withdrawing cash, utilizing crypto ATMs oregon buying golden to lick a problem.

10) Bring successful a 2nd person

Before moving a ample magnitude of money, intermission and telephone idiosyncratic you trust. A speedy speech with a household subordinate oregon person tin displacement your perspective. In galore cases, that extracurricular dependable is capable to halt a scam successful progress.

11) Limit however overmuch of your accusation is online

Scammers physique convincing stories utilizing existent details they find online. This tin see your telephone number, location code oregon fiscal history. To trim that risk, see removing your accusation from information broker and people-search sites. While you tin bash this manually, it often takes time, which is wherefore immoderate radical usage a information removal work specified arsenic Incogni to assistance automate the process and support their accusation from resurfacing.

Check retired my apical picks for information removal services and get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web by visiting Cyberguy.com.

Get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web: Cyberguy.com.

Scammers often run down the scenes, utilizing exertion and societal engineering to manipulate victims into handing implicit currency oregon valuables. (Paul Chinn/The San Francisco Chronicle/Getty Images)

Kurt's cardinal takeaways

Brian Oliver mislaid $200,000, leaving him with lone fractional of his status savings. Today, helium says helium is dilatory sinking toward bankruptcy, and the likelihood of getting that wealth backmost are slim. Even so, helium chose to spell nationalist truthful others could perceive his communicative earlier it happens to them. What makes this lawsuit antithetic is that it led to existent consequences. Detective Torres and his squad moved rapidly and acceptable up a sting operation. As a result, they arrested a courier who aboriginal received an 18-year situation sentence. Meanwhile, the IRS and FBI are inactive investigating the larger network. However, this benignant of result is rare. In astir cases, victims suffer everything and ne'er spot justice. These scams are complex, often tally from overseas, and are designed to determination wealth fast. Because of that, instrumentality enforcement usually focuses connected the radical closest to the unfortunate and works backward. In the end, Oliver's turning constituent came during a 2nd request for money. At that moment, thing felt off, truthful helium paused. Then helium said, "This cannot beryllium right." That instinct matters. In galore cases, that little intermission is capable to interruption the scam.

If you were successful Oliver's position, astatine what nonstop infinitesimal bash you deliberation you would person stopped, and what would it person taken for you to marque that call? Let america cognize by penning to america astatine Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, sojourn CyberGuy.com – trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join.

Copyright 2026 CyberGuy.com. All rights reserved.