If you are concerned about receiving etransfers, consider linking an email to your bank account for deposits only. This will bypass the issue of having to follow email directions for deposit, passwords, etc. Any legitimate money will be automatically deposited without any action on your part. The person sending has no access to your bank information. Use that email for these types of ‘refunds’.