Razorpay said it identified and immediately disabled the merchant account used to send bogus Geek Squad billing emails demanding $489.99, adding the account was in test mode and could not process live payments.
The scam still aimed to steal money or personal data by pushing recipients to click a "Proceed to Pay" link or call an 813 support number, where fraudsters could seek card details, passwords or remote computer access.
The emails mixed brand names including Geek Squad, Razorpay and "QuickTax Billing," used generic greetings, claimed a charge would hit within 48 hours and showed odd wording such as the German word "Rechnung".
Cybersecurity guidance in the report urged users to avoid links and phone numbers in unsolicited billing emails, verify charges through official company sites and contact banks immediately if they already responded.
As AI perfects scam emails, are our traditional methods of spotting them now obsolete?
When legitimate company tools are used for fraud, who bears the ultimate responsibility: the platform or the user?