Received a payment ‘by mistake’? Do not return it to a different account

An unexpected payment lands in your account. Minutes later the phone rings: “I am so sorry, I entered the wrong number. Please send it back quickly, but use this other account because the first belongs to my partner.” The caller sounds embarrassed, sends a receipt and says the money is urgently needed for medicine or a bill.

The instinct to help is exactly what a scammer exploits. The first payment may have come from another victim who believed they were paying for an online listing. If you send your own money to the account or phone number supplied by the caller, the criminal receives it while the defrauded buyer tries to recover the original payment. You sit between them with a record of two different transactions.

That does not mean every mistaken payment is fraud. People genuinely select the wrong recipient. The safe response is the same in either case: do not spend the funds, do not return them according to a stranger’s instructions, and contact your bank or payment provider through an official channel.

The essential rule: do not create a new payment

Pressing “send” creates a separate transaction from your account. Even if the amount matches, the description says “refund” and the caller provides identification, you do not know where the incoming funds originated or who controls the requested destination.

Do not send the money:

to an account different from the apparent source;
to a phone number through an instant-payment or person-to-person app;
as cryptocurrency, a voucher, code or cash;
to an “accountant,” “partner,” “courier” or other third party;
through a link to a supposed refund form;
after disclosing a text-message code, PIN or sign-in details.

Do not try to “reverse” the transfer using a button or link supplied by the sender. Your genuine banking or payment app may offer a return feature, but ask the provider which process applies to this payment type before using it.

What to do in the first fifteen minutes

1. Check only your own account

Do not rely on a text, screenshot or notification sent by the caller. Open your bank or payment service through its known app or a manually entered address and confirm whether the credit really arrived. A fake receipt can claim a transfer that never happened.

2. Leave the amount untouched

Do not withdraw it, move it to savings or count it as available money. Record the date, amount, description and details displayed with the transaction. Do not publish an account screenshot containing financial identifiers on social media.

3. End the conversation

You can say: “I will not make a payment based on a call. Please report the mistake to your provider; I am contacting mine.” Do not negotiate a deadline, discuss your balance or confirm personal details. If the sender is genuine, the provider’s mistaken-payment process exists to address the situation.

4. Call your bank or provider

Use the number in the app, on your card or on an official site you reached independently. Explain that an unexpected payment arrived and someone is demanding its return, possibly to different details. Ask the provider to register the report and explain the safe return process. Keep the case number.

5. Preserve the evidence

Keep texts, call history, chat messages and voicemail. Record the time of contact and what was requested. If the caller threatens you or demands secrecy, tell the bank or provider.

What a safe return route looks like

A person who genuinely made a mistake should report it to the institution or payment service they used. That provider can trace the original transaction, contact the receiving institution and explain the formal return route. Depending on the country and service, the exact mechanism differs, but it should not require you to follow fresh payment instructions from an unknown caller.

The provider-led route matters for two reasons. It can associate the return with the original transfer, and it avoids forcing you to decide who truly owns the funds or disclose personal information to a stranger.

Do not ignore a verified notice from your bank. Refusing to send money to an unknown caller does not mean you may keep a genuine mistaken payment. Confirm any notice by opening the official app yourself or calling a known number, then follow the provider’s instructions. Ask your bank, consumer financial authority or qualified adviser about deadlines and rights in your jurisdiction if the matter becomes disputed.

How a three-person version of the scam works

The risk is easiest to see in an example:

A scammer advertises a phone they do not own on a marketplace.
They give the buyer your phone number or account as the payment destination.
The buyer sends you the money, believing they are paying the seller.
The scammer contacts you and asks for the “mistaken” payment to be returned to the scammer’s account.
You send the same amount to the scammer, while the buyer receives no phone.
The buyer reports the fraud and identifies your account as the recipient.

On your statement, the incoming payment and your “refund” are not mirror images. They have different counterparties and may be treated as two separate events. The assurance that “you cannot lose because you are only returning what arrived” is therefore misleading.

In another version, the criminal uses a stolen payment account or card and asks to receive the money through a different method. The original transaction may later be disputed while the transfer you made remains one that you authorized. A visible balance is not proof that the situation is settled.

Signs that this is more than an ordinary mistake

the person requests payment to a different account, phone number or method;
they impose a one-hour deadline and tell an emergency story;
they threaten police, debt enforcement or publication of your details;
they tell you not to call the bank because “it will take weeks”;
they send a sign-in link or payment request for you to approve;
they offer to let you keep part of the money as a fee;
several people pay you and one person tells you to forward the total;
they ask for cryptocurrency, gift cards, codes or vouchers;
the caller knows the amount but cannot credibly explain the source;
they switch phone numbers or destination details during the conversation.

An offer of commission is particularly serious. You are no longer being asked to return a single mistake; you are being recruited to move money. End contact and disclose that detail to the provider.

If you already sent the money

Call your bank or payment provider immediately and state clearly that you made the transfer because of a suspected scam. Report both events: the unexpected incoming payment and your outgoing transaction, with the amounts, times and counterparties. Ask whether the second payment can be stopped, recalled or disputed. Recovery is not guaranteed, but acting quickly matters.

If you used a payment app, money-transfer service, cryptocurrency exchange or card, report the transaction to that service through its official channel as well. Do not pay anyone who later promises to recover the money for an advance fee; that may be a second fraud.

Preserve receipts and correspondence. Report the matter to law enforcement when there is a loss, threat or reason to believe criminal proceeds passed through your account. Describe the sequence accurately, including both the incoming and outgoing payment.

Business accounts require the same caution

At a company, an unexpected credit can resemble a customer overpayment, invoice adjustment or accounting error. The scammer hopes the person monitoring the inbox will quickly “clear the balance.” A refund should not go to details supplied in a new email.

Finance should match the payment to a specific invoice or agreement, verify the customer through previously stored contact information and use the approved refund process. A change in refund destination deserves additional approval. When details do not match, hand the case to the bank or fraud owner rather than leaving an employee to decide under pressure.

It helps to state a simple policy: an unidentified credit is not operating income and cannot be returned outside a documented process. That protects the company’s cash, its employee and the victim behind the first payment.

What the sources confirm, and what Breachroad recommends

Poland’s Financial Ombudsman described a 2026 scam in which criminals exploit an unexpected instant payment and ask the recipient to return it to different details. The Ombudsman recommends directing the sender to their bank and returning the money only through the bank process, using a dedicated technical account. Its guidance also explains the broader formal process for recovering a mistaken bank transfer. CERT Polska warns that forwarding an unexpected payment can make the recipient part of a chain moving proceeds from another fraud.

The fifteen-minute checklist, company refund control and suggested sentence for ending the call are Breachroad recommendations. They do not replace provider-specific instructions or legal advice in your country. If the caller instead says you must move your own savings to a “safe account,” use our guide to fake bank-security calls. Teams rehearse these situations in our employee cybersecurity training.