It starts as a classic “PayPal refund” scam—remote access, urgency, and the same old script. But the second they get a ...