Businesses receive an invoice via email with a credit card charge and are asked to call a fake number and hand over personal information to receive a refund.Source