diff --git a/packages/payload/src/auth/operations/refresh.ts b/packages/payload/src/auth/operations/refresh.ts
index 7889ebc1b3a..913baa5040d 100644
--- a/packages/payload/src/auth/operations/refresh.ts
+++ b/packages/payload/src/auth/operations/refresh.ts
@@ -73,10 +73,11 @@ export const refreshOperation = async (incomingArgs: Arguments): Promise<Result>
     const parsedURL = url.parse(args.req.url!)
     const isGraphQL = parsedURL.pathname === config.routes.graphQL
 
-    let user = await req.payload.db.findOne<any>({
-      collection: collectionConfig.slug,
-      req,
-      where: { id: { equals: args.req.user.id } },
+    const user = await args.req.payload.findByID({
+      id: args.req.user.id,
+      collection: args.req.user.collection,
+      depth: isGraphQL ? 0 : args.collection.config.auth.depth,
+      req: args.req,
     })
 
     const sid = args.req.user._sid
@@ -86,7 +87,7 @@ export const refreshOperation = async (incomingArgs: Arguments): Promise<Result>
         throw new Forbidden(args.req.t)
       }
 
-      const existingSession = user.sessions.find(({ id }: { id: number }) => id === sid)
+      const existingSession = user.sessions.find(({ id }) => id === sid)
 
       const now = new Date()
       const tokenExpInMs = collectionConfig.auth.tokenExpiration * 1000
@@ -96,7 +97,6 @@ export const refreshOperation = async (incomingArgs: Arguments): Promise<Result>
         id: user.id,
         collection: collectionConfig.slug,
         data: {
-          ...user,
           sessions: removeExpiredSessions(user.sessions),
         },
         req,
@@ -104,13 +104,6 @@ export const refreshOperation = async (incomingArgs: Arguments): Promise<Result>
       })
     }
 
-    user = await req.payload.findByID({
-      id: user.id,
-      collection: collectionConfig.slug,
-      depth: isGraphQL ? 0 : args.collection.config.auth.depth,
-      req: args.req,
-    })
-
     if (user) {
       user.collection = args.req.user.collection
       user._strategy = args.req.user._strategy