A retiree’s savings can disappear without a burglar ever entering the house. In a recently announced federal case, a false tech-support story turned fear about a hacked computer into the loss of most of one Chicago woman’s retirement money.

The court’s restitution order matters to the victims in that case, but it is not a public refund program. For other households, the practical value is seeing the scam’s pressure points early enough to stop a transfer before money leaves the account.

The case shows how a routine warning becomes a financial emergency

Federal prosecutors said Kartik Saini and co-schemers posed as tech-support or security employees of well-known companies during 2020 and 2021. They told people that computers had been hacked and bank accounts were compromised, then persuaded the targets to move money into accounts supposedly being protected during an investigation. The accounts were actually controlled by the scammers.

The Justice Department’s July 7 case announcement says at least four victims were targeted for an intended loss above $1.2 million. One Chicago resident lost more than $746,000, described by prosecutors as a large portion of her retirement savings. Saini pleaded guilty to wire fraud, received a prison sentence of six years and one month on June 25, and was ordered to pay full restitution to his victims.

Scams move fast, but their pressure tactics leave patterns. The free Retirement Shield newsletter explains the newest warnings and the practical tell to watch. Get the free newsletter.

Restitution is a court order, not a promise of a quick repayment

A restitution order recognizes the victims’ losses and makes repayment part of the criminal judgment. It does not mean every dollar is already waiting in an account, and it does not create an application for people harmed by unrelated scams. Recovery depends on the defendant’s ability to pay and the federal collection process. Anyone who was not identified in this prosecution should not send personal information to a caller claiming to “add” a name to the restitution list.

That distinction is especially important after a highly publicized case. Criminals often approach people who have already lost money and offer to recover it for an advance fee. A genuine court, prosecutor, bank, or federal agency will not require gift cards, cryptocurrency, or a transfer to unlock restitution. A demand for money before money can be returned is another warning, not a recovery service.

The script depends on panic and borrowed authority

The story often begins with a pop-up, email, text, search result, or unsolicited call. The supposed technician may use the name of a familiar technology company, bank, retailer, or government office. The Federal Trade Commission’s tech-support guidance says real security pop-ups do not tell people to call a phone number, and legitimate technology companies do not unexpectedly contact customers to announce a computer problem.

Next comes manufactured urgency. The caller may claim that a bank account is under attack, a refund was issued incorrectly, or the target is connected to a crime. Remote access to the computer lets the caller display fake information, move between screens, or collect credentials. The demand then shifts from “fixing” a device to moving household money through a wire, bank transfer, gift card, payment app, cash delivery, or cryptocurrency.

The safest response is to end the contact and verify the situation through a separate channel. A bank’s number should come from the back of a card, a statement, or the bank’s own website, not from the warning on the screen. A company’s official support page is safer than a search ad or a number supplied by the caller. No legitimate helper needs retirement savings moved into a “safe” account.

Fast action can limit damage after access or payment

If a scammer obtained remote access, the computer should be disconnected from the internet and examined with current security software or by a trusted professional. Passwords should be changed from a different, clean device, beginning with email and financial accounts. The FBI’s response checklist also advises contacting financial institutions immediately, preserving emails and transaction records, and expecting possible follow-up attempts because victim information may be shared.

The payment method determines the next call. A bank or wire provider may be able to stop or recall a transfer if contacted promptly. A card issuer can explain dispute options. A gift-card company should receive the card number and receipt as soon as possible. None of those steps guarantees recovery, but delay generally reduces the available options.

A household pause rule is cheap protection

A simple family policy can break the scam’s momentum: no large or unusual transfer based on an incoming call, pop-up, or message without a second person reviewing it. That second person does not need technical expertise. The purpose is to create time, move the conversation away from the caller, and verify the claim independently.

Reports can be filed through the FBI’s Internet Crime Complaint Center, while suspected fraud should also be reported to the affected bank or payment company. Records should include dates, phone numbers, email addresses, account details, receipts, and the wording used by the scammer. Those details can help trace a transaction and may connect one household’s report to a broader investigation.

The federal sentence does not undo the Chicago retiree’s loss. It does, however, expose the central lie behind the scheme: money is not made safer by sending it to a stranger who created the emergency in the first place.

Refunds, consumer protections, and benefit deadlines are useful only when people know they exist. The free Retirement Shield newsletter tracks the legitimate ones. Join free.

This article was researched and drafted with AI assistance and checked against the linked primary sources. Public records were used to verify every specific figure and deadline.