Thousands have already been targeted by scammers who deposit bogus refund money into your bank account and then demand repayment.