how to be safe from fake refund message