Potential phishing scam?
"You need to talk to your bank.  If you're unable to contact your bank until Monday, then wait until Monday.  Don't fixate on the idea that the transaction may ""hard post"" on Monday.  If it happens, it happens, but it's not the end of the world. Even if the transaction posts, it's not the end of the world.  If the retailer is legit, they will refund your money, although it may take some time for things to get sorted out. Even if the transaction posts and the retailer is not legit, it's still not the end of the world.  Your bank may help you in trying to recover the funds.  That's why you need to talk to your bank. As you have realized, blindly calling the number in the email is not a good idea, because if it's fake, you're calling the scammers.  Instead, what you should do is try to contact your bank through known trusted channels.  That is, look on your bank's website.  Do they have a phone number listed for fraud reporting or related inquiries?  Is it the same number you see in the email?  If so, you can call it.  If it is not the same number, but the number on your bank's website is a 24-hour number, you can call them at that number and tell them the situation. Based on what you've described, my own guess would be that the retailer is legit, but that the unusual large transaction was flagged by your bank as potentially fraudulent, which is why you got the email.  The fact that you happened to get the email just after canceling the order could be a coincidence.  This is especially true if all this happened in a short time.  Information about these transactions can't be transmitted and analyzed instantaneously, nor can emails be sent instantaneously; there may have been a delay in sending the email so it only arrived after the cancellation. As far as your worries about how ""enfact"" got your info, it is likely a fraud-detection service used by your bank.  Doing a bit of googling reveals that it appears to be a legit service, but there have also been instances of phishing attacks using faked ""enfact"" emails.  However, from what I see, these worked by trying to get you to click on a link, not call a phone number.  Also, if a scammer is able to send you a scam email that includes your actual order details, that's not a phish, it's an outright hack.  In that case the bank and/or retailer (whichever was hacked) would certainly want to know about it and would likely fall all over themselves trying to refund your money to avoid negative PR." Call your bank and inquire if they send out the kinds of notices like the one you received.  Don't call the number in the message, because if it is a scam, you're calling the scammers themselves, more than likely. Be very cautious about this situation, and if your bank is local then it might not hurt to pay a visit to a local branch to talk to someone in person.  Print out the message(s) you receive to show them and let their fraud division look into it.
This is a scam.  Do not give them any money. A quick search on this site will yield many examples of this scam. "I doubt it's a scam. It would be extremely difficult (if not impossible) to pay someone money using PayPal and end up getting more than you paid back. PayPal doesn't have the concept of ""pulling"" money without the owner of the account signing up for a subscription. Otherwise the owner must ""push"" the payment to the recipient. So, it is very likely that someone simply mistyped an email address which happens to be an alias of yours (since the periods are optional in gmail addresses). As for what to do, I think you've already done the right thing by contacting both PayPal and the sender." or is this a form of money laundering? May not be, generally the amounts involved in money laundering are much higher. So if there are quite a few such transactions then yes it could be money laundering. It could also be for circumventing taxes, depending on country regulations one may try to do this to get around gift taxes etc. In this specific case it looks more of link harvesting / SEO optimization. Take a low cost item that is often searched and link to other product. if you see the company link on Amazon; Cougar takes you to shoes. So maybe on its own Cougar shoes does not rank high, so link it with similar name brand in different segment and try to boost the link. It's marketing or SCAM tentative. Please check with extreme attention before clicking any link present in the communication. "Here we go again! Why, oh why, would someone just open a bank account in your name with that much money for no good reason?  Unless there's a very rich relative in your family tree, this can not come to a good ending.  Besides, if this was money being left to you by someone as part of an inheritance, you'd hear from attorneys from the estate. Notwithstanding everything @NickR posted about the details of what makes it suspicious, ask yourself why a banker would contact you by email about an account with this much money in it.  The bank would, at the very least, send you a registered/certified letter on official stationery.   So what happens here is when you give them your banking information, whoever it is that's doing this will clean out your account, and that's for starters.   They will ask for enough information to steal your identity too, and if you have good credit, that'll be gone in a heartbeat. The best scams (meaning the most successful ones) always appeal to peoples' greed, using large amounts of money that just miraculously belong to the victim, if only they'd give a little information to ""transfer"" the money.   Worse yet, most of these scams will come up with some kind of ""fee"", ""tax"" or other expense that you have to pre-pay in order to make the transfer happen, so this just adds insult to injury when you find out (the hard way!) you've been scammed. DO NOT reply to the email you received or, if you already have, don't send any more responses.  If they think they may have you on the hook then they won't stop trying, and it will become very messy very quickly. THIS IS NOT REAL MONEY!  It isn't yours, it doesn't really exist, and all it will do is come to no good end if you go any further with it. Stay safe, my friend." "To add to @Dheer's answer, this is almost certainly a scam.  The money deposited into your account is not from a person that made an honest mistake with account numbers.  It's coming from someone that has access to ""send"" money that isn't their own.  I don't know exactly what they're doing to ""send"" the money but at some point in the near future your bank will claw that money back from you on the grounds that it was illegitimately transferred to you in the first place.  If you send someone money on the premise that you're returning this money then that will be a separate transaction which won't be undone when the deposit in question is undone. Another possibility is that this person has gained access to an account from which they can send domestic wires but not international wires.  Their hope is to send money to someone domestically (you) and that this person will then send the money on to Nigeria.  If you comply with them; you, in a worst case scenario, could be seen as a money laundering accomplice in addition to having the deposit taken back from you.  It's not very likely you wouldn't be seen as another victim of a scam but people have been thrown in jail for less. You should not respond to this person at all.  Don't answer the phone when they call and ignore their emails.  Don't delete the emails, it's possible that someone at the bank or LE want them.  Call your bank immediately and tell them what's up." "It doesn't matter if the terms are a ""fair deal"" or are ""too good to be true"" — either way, it's definitely a scam. They are ""phishing"" for your personal information, including your banking information, and have no intention of giving you a loan. How can I tell? Simple: all such offers like this everywhere are scams. There is no economic situation other than being a scammer to do this. Why would an individual put out their money to strangers at such a high risk for even a much, much higher purported return? They wouldn't." The scammer is definitely up to something fishy. He (it's certain that the she is a he) may deposit some money into your father's account to gain his trust. After which, he will propose to come meet your dad. That's where the scamming begins. He will come up with a story about flight, VISA issues, or a problem he has to solve before coming over. Another is that he can use your dad's empty account to receive monies he scammed off people. That way there's no direct link with him and his other victim. This is basically a form of credit card kiting, it's not necessarily illegal but it can be. It is, however, against the TOS in pretty much every merchant agreement (including Paypal and Square), so you'd most likely have your account suspended, and the merchant could pursue legal action if they felt they could prove intent to deceive. It's not practical given actual fee structures, but even if it were, most merchants are quite good at detecting this sort of thing and quick to shut down accounts. Yes it is a scam. There is no money. They are after your personal details so that they can get your money. "You're potentially in very deep water here. You don't know who this person is that you're dealing with.  Before you'd even met him, he just gave you his banking info, seemingly without a second thought.   You have no idea what the sources of his money are, so what happens if the money is stolen or otherwise illegal?  If it is determined that you used any of that money, you'll be on the hook to return it, at the very least.  Who knows what the legal ramifications are either? So it sounds like you began spending his money before you had any kind of written agreement in place?  Doesn't that seem odd to you to have someone just so trusting as to not even ask for that? Was the source of the email about the $2500 from PayPal, or from him or his advisor?  PayPal always sends you a notice directly when funds are received into your account, and even if they were going to put a temporary hold on them for whatever reason (sometimes they do that), it would still show up in your account. I would HIGHLY (can I be more emphatic?) advise you not to go anywhere NEAR his bank account until or unless you can absolutely verify who he is, where his money comes from, and what the situation is. If you start dipping into his account, whether you think you're somehow entitled to the money or not, he could cry foul and have you arrested for theft. This is a very odd situation, and for someone who says he's normally cautious and skeptical, you sure let your guard down here when you started spending his money without making any serious effort to confirm his bona fides. Just because he passes himself off as smart and the ""doctor type"" doesn't mean squat.  The very best scammers can do that (ever see the movie ""Catch Me If You Can"", based on a true story?), so you have no basis for knowing he's anything at all. I am thoroughly confused as to why you'd just willfully start using his money without knowing anything about him.  That's deeply disconcerting, because you've opened yourself up to a world of potential criminal and civil liability if this situation goes south. If this guy was giving you money as an investment in your business and you instead used some of that money for your own personal expenses then you could land in very serious trouble for co-mingling of funds.  Even if he told you it was okay, it doesn't sound like there's anything in writing, so he could just as easily deny giving you permission to use the money that way and have you charged with embezzlement. You need to step back, take a deep breath, stop using his money, and contact a lawyer for advice.  Every attorney will give you a free consultation, and you need to protect yourself here. Be careful, my friend.  If this makes you suspicious then you need to listen to that voice in your head and find a way to get out of this situation." "GB Stone are known scammers. I don't know why ""Joe Taxpayer"" removed this essential information from the question." "It is likely a scam.  In fact the whole mystery shopping ""job"" may be a scam.  There is a Snopes page about cashier's check scams, as well as a US government page which specifically mentions mystery shopping as a scam angle. As for how the scam works, from the occ.gov site I just linked: However, cashier’s checks lately have become an attractive vehicle for fraud when used for payments to consumers. Although, the amount of a cashier’s check quickly becomes ""available"" for withdrawal by the consumer after the consumer deposits the check, these funds do not belong to the consumer if the check proves to be fraudulent. It may take weeks to discover that a cashier’s check is fraudulent. In the meantime, the consumer may have irrevocably wired the funds to a scam artist or otherwise used the funds—only to find out later, when the fraud is detected—that the consumer owes the bank the full amount of the cashier’s check that had been deposited. It is somewhat unusual in that, from what you say, there has been no attempt thus far to get money back.  However, your sister-in-law may have received that info separately, or received it as part of her mystery shopping job but didn't mention it to you with regard to this check.  Typically the scam involves telling the recipient to transfer money to a third party (e.g., by buying goods as a mystery shopper, or via wire transfer to ""reimburse"" someone associated with a sham operation).  By the time the cashier's check is revealed as fraudulent, the victim has already transferred away his/her own real money. It's probably worth taking the check to your or her bank and asking them about it.  They may have more info.  Also, banks usually want to know about scams like this because, in the long run, they accumulate data on them and share that with law enforcement and can eventually catch some of the scammers. Edit: Just to help anyone who may be reading this later.  The letter you added confirms it is absolutely a scam.  My boss was once contacted via a scam operation very similar to this.  The huge red flag (in addition to others already mentioned) is that you are being ""given"" a check for over $2000, of which only $25 is purportedly for actual mystery shopping and $285 is payment for you, the mystery shopper.  The whole rest of the $2000+ amount is for you to wire to ""another Mystery/Secret Shopper in order for them to complete their assignment"".  They are giving you $2000 to give to someone else who is supposedly another one of their own employees/contractors.  Ask yourself what sane business would conduct their operations in this way.  If you work at a law office, or a hamburger stand, or a school, or anything you like, does your boss ever say ""Here is your paycheck for $5000.  I know you only earned $1000, but I'm just going to give you the whole $5000, and you're supposed to use $4000 of it to pay your coworker Joe his wages.""  No.  There is no reason to do that except that the ""other mystery shopper"" is actually the scammer." "This is almost certainly a scam or a mistake.  This is not good, spendable money: it is not yours to keep. Very simple to handle.  Tell the bank, in writing that you were not expecting to receive this money and are a bit surprised to receive it. Preferably in a way that creates a paper trail.   And then stop talking.  Why?  Because you honestly don't know.   This puts you at arm's length to the money: disavowing it, but not refusing it. Wildest dreams: nobody wants it back ever.    As for the person bugging you for the cash, tell them nothing except work with their own bank.  Then ignore them completely.  He probably hacked someone else, diverted their money into your account, and he's conning you into transferring it to a third location: him.  Leaving you holding the bag when the reversals hit months later.  He doesnt want you reversing; that would return the money to the rightful owner!  He works this scam on dozens of people, and he wins if some cooperate. Now here's the hard part.  Wait.  This is not drama or gossip, you do not need to keep people updated.  You are not a bank fraud officer who deals with the latest scams everyday, you don't know what the heck you are doing in this area of practice.  (In fact, playing amateur sleuth will make you suspicious).  There is nothing for you to do.  That urge to ""do something"" is how scammers work on you. And these things take time.  Not everyone banks in real time on smartphone apps. Of course scammers target those who'd be slow to notice; this game is all about velocity.   Eventually (months), one of two things is likely to happen.   The transfer is found to be fraudulent and the bank reverses it, and they slap you with penalties and/or the cops come knockin'.  You refer them to the letter you sent, explaining your surprise at receiving it.  That letter is your ""get out of jail free"" card.   The other person works with their bank and claws back the money.  One day it just disappears.  (not that this is your problem, but they'd file a dispute with their bank, their bank talks to your bank, your bank finds your letter, oh, ok.)  If a year goes by and neither of these things happens, you're probably in the clear.  Don't get greedy and try to manipulate circumstances so you are more likely to keep the money.  Scammers prey on this too.  I think the above is your best shot." That sounds pretty fishy to me.  I'm an IT professional - I can determine more about him if I have full access to the email headers.  Just give me your email and your password so I can log in and check the email he's using to contact you.