The scammer, “Kevin Peterson (Employee ID: 7044056219482, Reference ID: RFID10845192567, Cancellation ID: VCGA0019649573642, Transaction ID: 96741833249748952929),” asked me to “open the Google Chrome” and go to gyua1.top (IP: 37.221.65.45 ), which presented a 403 error, then AnyDesk (ID 1058492964: Password: cancel123).
Once the scammer remotely connects to my computer, they will “cancel the services” by blacking out my screen and providing his personal TextNow number, (561) 560-6180.
During this time, “Kevin” installed their ConnectWise and have you change your login password. They will then have you fill out a “refund form” and asking you to “log into your online banking.”
Since I don’t do online banking, “Kevin” had a word with his “billing team” and tried to enroll me in “online banking,” so I played him the Bhenchod Song before logging me out of my computer. In order to “log in,” I was asked to call the TextNow number 208-500-2756.