(888) 374-1397 Refund Scam

The refund or Windows License Expired scam is a variation of the traditional phony technical support scam. In a traditional refund scam a target list of victims are hit with robocalls informing them that a tech support company is 'going out of the business' and that you were a subscriber who is due a refund. Because this type of scam script had become easier and easier to identify, refund scammers have switched to claiming that your computer's antivirus security subscription has expired and will ask you whether you want to cancel or renew the subscription.

Most victims will opt to cancel and from there the traditional refund scam script resumes where the scammer connects to your computer with GoToAssist or TeamViewer then asks you to login to your bank. From there they will try to blank your screen while they edit the HTML of your balance page at your bank to show a phony deposit from the scammer. The scammer will then inform you that they made an error and deposited too much money and ask you to transfer some of it back to them. Simply pressing F5/refreshing reveals the scam.

To bait this scam, use a virtual machine and carry out everything the scammer asks you to do slowly. You can use Northwatch as your fake bank. We also have a virtual machine you can use here.

Some helpful directory information about this number I found:

Carrier: Bandwidth/Zipwhip - Toll-Free - SVR

Subscriber: TOLL FREE CALL

Line Type: voip

Country: US

these people are slimey as they come, 

Amazon Fraudline
Initial call answered by Anna

Transferred to Technician
Ethan
ex 4491

Name and Address of where Postal Check to be sent

Name : Cloud Apps LLC
Memo : TP1005
Address : 11700 Mukilteo Spdwy Ste 201-1031, Mukilteo, Wa 98275
1407.23 Dollars only

Not sure what Importance this phone number has (This was the 1st number given then redacted) 
Toll Free Private : 18007171179 Ethan

This number is Ethans Direct Line
Toll Free # : 18556734839 Direct Line Etha

Carl