United Refund Scam Explained
Author: Trend Micro
Scammers have recently been posing as representatives from a company named United/United Refund. They’ve been attempting to deceive people by stating that they qualify for a W2-related refund and then attempting to manipulate them into disclosing their personal and financial information.
Although it has been reported as so elsewhere online, there is no indication that the scammers are intentionally impersonating United Airlines. It is simply an unfortunate coincidence that the scammers chose a bogus business name similar to that of the airline.
United refund scam call
As reported by ScamAdviser, scammers have been calling people from a number with a caller ID of 855-977-1975, stating they’re from a company called United/United Refund, and informing would-be victims that they’re entitled to claim a W2-related refund.
Below is a screenshot showing a transcription of a voicemail left by one of the perpetrators of this scam that has recently been targeting business owners.
United refund scam. Source: ScamAdviser
The scammers’ goals
Although the scammers appear to be calling from the US, it seems as though they may be based elsewhere, as evidenced by this Tweet:
Report of United refund call scam on Twitter
The scammers may have been attempting to trick that Twitter user into using the legitimate money transfer app, WorldRemit, to transfer money directly into their account — a brazen scam, if nothing else.
However, the scammers likely have an additional goal: to get people to share their personal and financial information, which they perhaps intend to sell to cybercriminals/hackers on the dark web and/or use to commit further crimes themselves.
Be sure to watch out for scam calls such as this one. Also, be aware of the fact that although the scammers spoofed the number 855-977-1975 in many incidents of this scam recently, that’s not to say that they won’t switch to using a different phone number, or even a different fake company name. As always, be vigilant.
How did the scammers get my phone number?
If you’ve received a similar call or voicemail and you’re wondering how the scammers were even able to get your phone number in the first place, you’re not alone. They will often get people’s personal info from underground internet forums or the dark web — two places that are hotbeds for stolen/leaked data.
If you want to find out if your phone number has been leaked, be sure to check out ID Protection. Also, make sure to explore all its other features because it’s packed with lots of them, including Personal Identity Monitoring and Social Media Account Monitoring. If you care about protecting your identity and online privacy, you’ll definitely want to click the button below.
If you’ve found this article an interesting and/or helpful read, please SHARE it with friends and family to help keep the online community secure and protected. Also, please consider clicking the LIKE button below.
This article was published in collaboration with Trend Micro.
Image source: unsplash.com
Report a Scam!
Have you fallen for a hoax, bought a fake product? Report the site and warn others!
Scam Categories
Help & Info
Top Safety Picks
Your Go-To Tools for Online SafetyDisclaimer: Some of the links here are affiliate links. If you click them and make a purchase, we may earn a commission at no extra cost to you.
- ScamAdviser App : That site looks legit. That's exactly how they get you. Modern scams are frighteningly convincing. ScamAdviser scans sites and blocks fraud calls automatically. Free on iOS & Android.
- NordVPN : NordVPN delivers powerful, seamless protection for your online life - whether you're at home, on public Wi-Fi, or traveling abroad. Recognized as one of the fastest VPN services available, it combines lightning-fast speeds with advanced encryption to keep
- Incogni : Incogni automatically removes your personal data from data brokers that trade in personal information online, helping reduce scam and identity theft risks without the hassle of manual opt-outs. Reclaim your privacy now!
- Private Internet Access (PIA) : PIA gives you a no-logs VPN built on the latest encryption standards and WireGuard protocol — meaning your browsing activity stays yours alone. Fast, private, and transparent. Take back your privacy today!
- Surfshark VPN : One subscription, unlimited devices. Surfshark is the fastest VPN out there — covering your phone, laptop, tablet and more with a stable, secure connection for browsing, streaming and working. Get Surfshark now!
- Proton VPN : Independently audited and built with a strict no-logs policy, Proton VPN is trusted by over 3 million users worldwide. It’s been named Best VPN by Wired, PCMag, and Vice—offering strong encryption for anyone who takes their privacy seriously. Give Proton
Popular Stories
In a nutshell: A good VPN protects your privacy with strong encryption, a strict no-logs policy, and fast protocols like WireGuard. The best VPNs also offer wide server coverage, leak protection, and easy-to-use apps for all devices. For 2025, the top providers are NordVPN, ExpressVPN, Surfshark, Proton VPN, Private Internet Access, CyberGhost, and Mullvad—each excelling in speed, security, or value. In an age where every click is tracked, a Virtual Private Network (VPN) is no longer just a luxury—it's an essential tool for digital privacy and security. A VPN works by creating a secure, encrypted tunnel between your device and the internet, masking your real IP address and protecting your sensitive data from prying eyes. But with hundreds of providers out there, how do you sort the secure from the suspect? This guide breaks down the non-negotiable features of a quality VPN and highlights the 7 top-rated services for 2025. What to Look for in a Good VPN: The 4 Non-Negotiable Pillars 1. Ironclad Security Features Strong Encryption: AES-256, the gold standard. Secure Protocols: OpenVPN, WireGuard, NordLynx, Lightway. Avoid PPTP. Kill Switch: Ensures no accidental IP leaks. Leak Protection: Covers DNS, IPv6, and WebRTC. 2. Verified Privacy Practices No-Logs Policy: No activity or metadata tracking. Independent Audits: Verification by third parties. Safe Jurisdiction: Prefer countries outside the 5/9/14 Eyes alliances. 3. High-Speed Performance Fast Protocols: WireGuard and equivalents. Large Server Network: Less crowding, more reliable speeds. 4. Essential Usability Features Multi-Device Apps: Windows, Mac, iOS, Android, routers. Simultaneous Connections: One account, many devices. Unblocking Power: Netflix, Hulu, BBC
This article has been updated by Jamie James on June 9 with the latest data and analysis we have found using real user reports and experiences submitted to ScamAdviser. Just received that terrifying notification? Or perhaps you've noticed suspicious activity in your accounts? Take a deep breath. Your email, password, phone number, home address, payment details, or identity documents may now be in places you cannot control. But the next steps do not have to be confusing. What matters most is how quickly you act, order, and know which exposed data creates the biggest risk. This guide explains what to do after a data breach, how to check the damage, and how to protect yourself from identity theft, account takeover, and follow-up scams. Quick Summary Verify the data breach notice through the company’s official website before clicking any links. Secure your primary email account first because it controls many password resets. Change the exposed password and every reused or similar password. Enable multi-factor authentication on email, banking, payment, cloud, and social accounts. Contact your bank or card issuer if payment or bank account details were exposed. Freeze or protect your credit if sensitive identity information was compromised. Watch for phishing messages, fake refund offers, and scam websites that use your leaked details. Starting with Data Breach Numbers The numbers don't lie: according to a 2024 report, the number of data breach victim notices has grown by a staggering 211% year-over-year. This isn't just a distant threat; it's a stark reality many individuals fa