Surely they have a record of credit cards debited...
...then they credit those accounts. Why not?
Sending out emails is crass. Or maybe they don't want to reimburse the money.
The FTC says it has begun the process of refunding $10m it collected from a tech support scam operation. The US trade watchdog said customers who bought bogus security software from a company called "Advanced Tech Support" or "Inbound Call Experts" will be eligible to get partial refunds. According to the FTC, the operators …
Not only is it crass, but you just know it will be set up like many actual scam emails that have gone before ... maybe they are just assuming that because they fell for a real scam, they will be just as likely to input details on a new 'non-scam' link.
Those that have had details compromised will hopefully have new accounts so although they have the scammed account information it may not be active. However, they still have other contact information. Maybe try with the banks they held the compromised account with so they can work out an automatic credit option.
Or, those who do believe that it's real will now have it reinforced that emails like this are genuine and if I enter my bank details on this page that the lovely email said I should, I'll definitely get given some money. That nice Nigerian Prince really is generous.
Would you like a cup of tea?