This starts like a classic refund scam: fake invoices, remote access, and a “refund form” designed to confuse you. Then the ...