In a strange turn of events, a phishing scammer has returned a large portion of funds it stole from a victim last September.