My account was retrieved but it was not me. What should I do if the platform asks me to refund my money?

The immediate priority is to formally and unequivocally notify the platform that the account retrieval and any subsequent financial transactions were unauthorized. This is not merely a customer service issue but a potential security breach and fraud event. Your response must be documented; use in-app reporting features, email support, and any dedicated fraud or security contact channels, providing timestamps and any evidence you have that the account was compromised. Your core position must be that you are the victim of account takeover fraud, and you are disputing the legitimacy of the transactions in question. Do not agree to any refund demand under the premise that you authorized the actions, as this could be construed as accepting liability. Instead, frame your communication as a fraud report, demanding a freeze on the account and a full investigation.

The platform's request for a refund likely stems from their automated systems detecting a reversal of funds—such as a chargeback via your bank or payment processor—after the fraudulent party spent the money. Their demand is a procedural step to recover their lost revenue. Your strategic response hinges on understanding the mechanisms at play. If you initiated a chargeback with your bank, you must provide the bank with the platform's refund request as part of your fraud claim, demonstrating the ongoing dispute. If you have not yet contacted your financial institution, doing so is now critical; a formal chargeback for unauthorized transactions is often the most powerful lever you have. Simultaneously, you must compel the platform to investigate the account access itself, pointing to IP address logs, device fingerprints, or recovery method changes that will prove the access was not from you.

Your legal and practical standing depends on meticulously separating the issue of account security from the payment dispute. The platform's Terms of Service will contain clauses on account security and unauthorized transactions, but these typically cannot override consumer protection laws against fraud. You should explicitly cite relevant regulations, such as the prohibition on holding consumers liable for unauthorized electronic fund transfers under regulations like the U.S. Electronic Fund Transfer Act, if applicable. The implication of capitulating to the refund demand is significant: you would be financially penalizing yourself for the platform's potential security failure and absorbing the fraudster's theft. Therefore, your path forward is a dual-track approach of persisting with the formal fraud investigation through the platform's security or trust and safety team while supporting your payment provider's chargeback process with all correspondence from the platform. Escalate within the platform if necessary, and be prepared to file a complaint with a relevant consumer protection or financial regulatory authority if the platform refuses to acknowledge the account compromise and continues to hold you liable for the fraudulent spend.