They will need to send them money back or purchase something to send to the scammer. Could be a computer that needs to be configured at corporate or something purchased from them posing as a vendor. A common thing is they send an overpayment and request money be sent back immediately. It can be considered participating in money laundering and I know of 'victims' who are unable to open bank accounts. And of course the original funds will turn out to be bad.