Find notable cyber news and cases, enriched with sources, timelines, and signals.

Refund-fraud communities commoditize refund abuse into a service market

Threat Actor Meta
First reported
Last updated
Happening score
H score 38
1 unique sources, 1 articles

Summary

Hide ▲

Underground fraud communities have commoditized refund abuse into a service market, increasing losses for retailers and payment platforms. Sellers now package methods, tutorials, and operational services that let less-skilled buyers exploit customer-service and chargeback workflows. The shift lowers the barrier to entry and makes refund fraud easier to scale across major consumer brands.

Related Happenings

Caller-as-a-Service scam ecosystem professionalizes underground fraud

Threat Actor Meta
First: 22.04.2026 17:01 Last: 22.04.2026 17:01 Sources 1

About this happening: The **Caller-as-a-Service** scam ecosystem has become **highly professionalized and segmented**, making fraud easier to scale and harder to disrupt. Distinct operators now handle...

2024 Retail refund fraud losses across retailers and payment platforms

Target Trend
First: 18.03.2026 16:05 Last: 18.03.2026 16:05 Sources 1

How related: According to the National Retail Federation (NRF) and Appriss Retail, retailers processed roughly $685 billion worth of returned merchandise in 2024, representing about 13% of total retail sales.

About this happening: **Refund fraud** has become a major loss trend for **retailers** and **e-commerce payment ecosystems**, with **2024** return volume reaching **$685 billion** and an estimated **$1...

Loyalty-fraud underground resale market for airline and hotel accounts

Threat Actor Meta
First: 12.03.2026 16:05 Last: 12.03.2026 16:05 Sources 1

About this happening: A **loyalty-fraud underground market** is turning compromised airline and hotel accounts into inventory, expanding the resale of miles and bookings across fraud-focused chat group...

PayPal customer accounts hit by cyberattack

Incident
First: 20.02.2026 15:12 Last: 20.02.2026 15:12 Sources 1

About this happening: **PayPal** confirmed **unauthorized transactions** on the accounts of a **small number of customers**, adding direct financial harm to the broader breach. The company said it **is...

China-based groups selling phishing-as-a-service kits for mobile-points smishing

Threat Actor Meta
First: 05.12.2025 01:02 Last: 05.12.2025 01:02 Sources 1

About this happening: Multiple **China-based cybercriminal groups** are selling **phishing-as-a-service platforms** that reuse the same scam infrastructure across **mobile points**, **tax-refund**, and...

Timeline

  1. 18.03.2026 16:05 2 articles · 2mo ago

    Researchers disclose a refund-fraud marketplace targeting major retailers and payment platforms

    Initial Disclosure

    Researchers analyzing thousands of posts from fraud-focused online communities found an underground refund-fraud marketplace where sellers advertise methods, tutorials, step-by-step guides, and refund-as-a-service operations aimed at Amazon, PayPal, Apple, eBay, Walmart, Best Buy, and other payment or delivery platforms. The market packages procedural knowledge for exploiting customer-service workflows, return policies, and payment-dispute systems, lowering the barrier to refund abuse.

    Show sources