The Fake McAfee Email That Nearly Cost $50,000
How a phishing email turned into remote access, a fake refund scam, and a near wire transfer.
A couple years ago, an older gentleman walked into the bank asking to send a wire transfer for nearly $50,000.
On the surface, the explanation seemed straightforward. He said the money was for home repairs.
But something didn’t feel right.
Fortunately, the banker helping him followed a process I stress constantly with my team:
Be curious. Be skeptical. Ask questions.
She asked a few follow-up questions and then brought me into the conversation.
When I sat down with the customer and asked more detailed questions—who was doing the work, what repairs were being done, when the contractor was starting—the story started to fall apart.
Eventually the truth came out.
And it all started with an email that looked like it came from McAfee Antivirus Software.
⸻
How the Scam Started
The customer had received an email warning that his antivirus software required a critical update.
The message appeared to come from McAfee, a brand he recognized and trusted.
For many people—especially older generations—security software like Norton or McAfee is something they take very seriously. They want to do the right thing and keep their computer safe.
So he clicked the link.
After a few screens flashed on his computer, a message appeared telling him to call a toll-free number to finish the update.
He wrote the number down in a small notebook he keeps with important contacts and called.
First he reached someone who sounded like a receptionist. She transferred him to a “technician” who began walking him through steps to fix the issue.
⸻
What the Scammer Was Actually Doing
During the process, the scammer convinced him to click another link allowing the technician to remotely access his computer.
At that point, the scammer could see everything happening on the screen.
Once the “repair” was finished, the technician said there would be a small service charge.
$52.00
To process the payment, the victim was instructed to click another link and log into his online banking.
That’s when the scammer discovered something extremely valuable.
While watching the screen, he could see the balances in two accounts:
• One account with about $64,000
• Another account with about $17,000
Now the scammer knew exactly how much money was available.
⸻
The Fake “Refund Mistake” Trick
After the victim entered the $52 payment, the scammer suddenly panicked.
He claimed he had accidentally issued a refund for $52,000 instead of $52.
The screen now appeared to show a massive credit.
The scammer urgently explained that the mistake would cost him his job unless the money was returned immediately.
But nothing had actually been refunded.
Instead, the scammer had simply transferred $52,000 from one of the victim’s accounts into the other.
To the victim, however, it looked like he had received money he didn’t deserve.
The scammer instructed him to go to the bank and wire back the difference immediately.
The amount?
$49,948.00
⸻
Where the Scam Fell Apart
When the customer arrived at the bank to send the wire transfer, the banker assisting him sensed something was wrong and brought the situation to me.
After asking a few questions, the story quickly unraveled.
Eventually the customer admitted what had happened.
The wire transfer was stopped before the money ever left the bank.
We immediately:
• Replaced the compromised accounts
• Reset his online banking credentials
• Instructed him to have his computer professionally cleaned of malware
A very expensive mistake had just been avoided.
Or so we thought.
⸻
Two Years Later… It Happened Again
Nearly two years later, I saw the same customer back in the branch.
We had developed a friendly relationship, so I walked over and asked how he was doing.
He told me he was buying a car.
But when I asked a few simple questions about the purchase, his answers were hesitant.
Something felt familiar.
After digging a little deeper, the truth came out.
The same scam had happened again.
This time, he noticed a double charge on his credit card from the real McAfee company. It was simply a billing mistake.
Instead of contacting McAfee directly, he looked in his notebook and called the number he had written down two years earlier.
Unfortunately, it was the same scam number.
The scammers repeated the exact same playbook.
They accessed his computer again, moved money between accounts, and claimed they had accidentally refunded too much.
This time they asked him to send them $27,300 to correct the mistake.
Because of his age and the early stages of dementia, he had no memory that the same scam had already happened before.
⸻
One Quick Way to Spot a Fake Email
Many phishing emails look convincing. They may include company logos, professional formatting, and urgent security warnings.
But there’s a simple trick that often exposes the scam immediately.
Click or tap on the sender’s email address to expand the full address.
Most email programs only show a display name, which can easily be faked.
For example, the email might appear to come from:
McAfee Security
But when you expand the address, you might see something like:
or
That’s a major red flag.
Legitimate companies typically send emails from their official domains, such as:
If the email comes from a personal Gmail, Yahoo, or Hotmail address, it’s almost certainly a phishing attempt.
⸻
🚩 The Red Flag
Several warning signs appeared in this situation:
• Emails urging you to click links for security updates
• Pop-up messages with phone numbers for technical support
• Requests to allow remote access to your computer
• Someone claiming they accidentally refunded too much money
• Urgent instructions to send money by wire transfer or check
Legitimate companies do not resolve mistakes this way.
⸻
What To Do If This Happens
If you think you may have interacted with a scammer:
1. Contact your bank immediately
2. Change your online banking passwords
3. Replace compromised accounts if necessary
4.Have your computer checked for malware or spyware
5. Monitor your accounts closely for suspicious activity
Acting quickly can prevent a bad situation from becoming much worse.
⸻
Final Thought
Most scams today don’t rely on breaking into sophisticated systems.
They rely on convincing ordinary people to trust the wrong person at the wrong moment.
Understanding how these scams work is one of the best defenses you have.
And sometimes, asking just a few extra questions can prevent a very costly mistake.
— R.C., Red Flag Report
⸻
Share This With Someone Who Should See It
If you found this helpful, consider forwarding it to a friend, neighbor, or family member who should know about these scams.
Many victims are parents or grandparents who may not realize how these schemes work.
They can subscribe to future alerts here:
Subscribe to the Red Flag Report - Scan the QR Code Below
Or visit www.redflagreport.net/subscribe
