The Federal Trade Commission is now mailing paper refund checks to consumers who lost money to Restoro and Reimage, two Cyprus-based tech support firms that used fake Microsoft Windows virus pop-ups to sell unnecessary computer repair services. The checks target people who did not accept or redeem earlier PayPal payments, a group that likely skews toward older adults who were disproportionately targeted by the scheme and may not have active digital payment accounts. More than $25.5 million has already been distributed to affected consumers, and the new round of paper checks represents the agency’s effort to reach those still owed money from a $26 million settlement.
Why paper checks follow the PayPal round for Restoro and Reimage victims
The FTC sent 736,375 PayPal payments on March 13 and 14, 2025, totaling more than $25.5 million. That digital-first approach was fast, but it left out anyone without a verified PayPal account or anyone who simply missed the notification. PayPal payments carry a 90-day cashing window, meaning unclaimed funds expired by mid-June 2025. The paper checks now going out are directed at consumers who fell through that digital net.
The logic behind a two-phase distribution is straightforward. The original scheme, according to the FTC, specifically preyed on older adults who clicked on pop-ups designed to look like legitimate Microsoft Windows security alerts. Many of those victims are less likely to maintain PayPal accounts or to recognize an unexpected digital payment as legitimate rather than as another scam. Sending physical checks to their mailing addresses removes that barrier, and it gives the FTC a second chance to put money back in the hands of people who were deceived.
The agency is also trying to balance speed with inclusivity. Digital payments allow the FTC to move large sums of money quickly, but they assume recipients are comfortable navigating online platforms, responding to email notices, and linking bank accounts. For a scam that exploited confusion and fear around computer security, that assumption does not always hold. Paper checks may be slower and more expensive to issue, yet they provide a tangible, familiar format that many consumers still trust.
How the $26 million Restoro and Reimage settlement produced these refunds
The enforcement action traces back to a complaint the FTC filed in March 2024 under case number X240021. The agency charged that Restoro Cyprus Limited and Reimage Cyprus Limited lured consumers with pop-up windows mimicking Microsoft virus warnings. Those pop-ups urged users to run free security scans, but the scans reported problems regardless of whether the computer actually had any issues. Consumers were then pressured into paying for repair services they did not need.
According to an FTC announcement of the settlement, the companies agreed to pay $26 million and were barred from making deceptive claims about security problems on consumers’ devices. The money was earmarked for consumer redress, with the agency responsible for identifying eligible victims and distributing refunds. That process began with the PayPal payments in March 2025 and is now continuing with mailed checks.
Of the $26 million, more than $25.5 million has been allocated through the refund program so far. Over $13.1 million was distributed in the initial PayPal round, and subsequent efforts have pushed the total higher as additional payments were processed. The FTC has not disclosed how many paper checks are being sent in this second phase or the precise dollar value they represent. What is clear is that the agency is working to close the gap between the settlement fund and the money that has actually reached consumers.
Unclaimed funds and unanswered questions about redemption rates
Several details about this refund program remain unresolved. The FTC has not published updated statistics on how many of the original 736,375 PayPal recipients actually cashed their payments before the 90-day window closed. Without that data, it is difficult to gauge how large the pool of unclaimed funds is or how many paper checks are now in the mail. The agency also has not said whether it will attempt additional outreach if a significant number of paper checks go uncashed.
Refund programs of this scale typically face challenges in tracking down consumers who have moved, changed email addresses, or closed bank accounts since they were originally defrauded. In the Restoro and Reimage case, those hurdles are compounded by the international nature of the companies involved and the time that may have passed since the fake pop-ups first appeared on victims’ screens. Each layer of outreach-first digital, then physical mail-inevitably leaves some people unreached.
For consumers, the practical question is how to respond if a payment notice arrives. The FTC advises people who believe they were affected by the Restoro or Reimage scheme to monitor their mail for checks and to be cautious about unsolicited calls or messages claiming to be from the government. The agency does not charge fees to issue refunds, and anyone who is asked to pay to receive a check is likely facing a new scam, not a legitimate recovery effort.
While key metrics such as redemption rates and the final share of the $26 million that will reach consumers remain unknown, the shift from PayPal to paper checks underscores the FTC’s attempt to adapt refund methods to the demographics of the victims. As the agency continues to administer the settlement, the effectiveness of this hybrid approach will hinge on whether those who were misled by alarming on-screen warnings ultimately receive real-world compensation in their mailboxes.
Free for readers: The free Retirement Shield newsletter sends plain-English help keeping more of your money in retirement — the scams to dodge, the benefits you’re owed, and what’s changing with Social Security and Medicare, a couple times a week. Get the free newsletter.
David M. Keller is a finance writer based in Columbus, Ohio, covering personal finance and consumer-focused economic topics. He earned his degree in journalism from Ohio University and began his career reporting on local business and economic trends for a regional media outlet. Since then, he has contributed to a variety of online publications, focusing on clear, practical coverage of topics such as cost of living, debt, and everyday financial decision-making.
