Wow, I thought that we could change the destination address, Well that's clearly something new to me.
I've never used RBF, but I have used double spend. What I did was simply erase the transaction from my Bitcoin Core, and make a new transaction.
The short answer is that you can't.
All that does is let you bump the fee... You can't "reverse" the transaction using RBF... It'll still go to the same address if confirmed:
But there are some strict policies like the same sending and recipient address for new payment. Scammers have no way to do the tricks to double spend the money to new address
As a receiving party, you should never rely on this. As long as a transaction is not confirmed, there is no guarantee it will go true. Satoshi recommends to even wait for 6 confirmations.
You could attempt what is known as a "double spend" where you try to broadcast a transaction using the same inputs (but different outputs ie. Send back to your own address and a much larger fee) in the hope that it gets confirmed first... But it is very technical, complicated and difficult to do and there is no guarantee it will work... Even if the double spend is accepted by a node (most will reject it or refuse to relay it)
It's actually quite simple, it just took me a while because rescanning my wallet to dump the transaction was slow. With the proper setup for this, a scammer could easily do it.
So this was a situation I was in a couple times but I wasn't on this forum when it happened.
How did you end up in this situation "a couple times"? If it's accidental, you should be more thorough. If it's malicious, well, you shouldn't