Norton Antivirus Renewal Invoice Email — Is It a Scam?
You received an email with an invoice for a Norton Antivirus subscription renewal — often for $299 or more. You don't remember subscribing, and the email wants you to call a number to cancel. This is a tech support scam that tricks you into giving remote access to your computer.
Think this email is a scam?
Forward it to us and get a free risk assessment in under 60 seconds.
How This Scam Works
Critical Risk — Tech Support Callback Scam
This is not a real Norton invoice. The goal is to get you to call the phone number, where scammers will request remote access to your computer and steal your money.
You receive an email with an official-looking invoice showing a charge of $299 to $499 for a Norton Antivirus or Norton 360 subscription renewal. The email says the charge will be processed automatically unless you cancel by calling a provided phone number.
When you call, the person who answers pretends to be a Norton representative. They ask for remote access to your computer to "process the refund." Once they have access, they may show you a fake bank screen claiming they've refunded too much money and ask you to send back the difference via gift cards, wire transfer, or cryptocurrency. They may also install malware or steal files.
This is one of the most reported scam emails in the United States. Norton and McAfee impersonation scams are consistently among the top consumer complaints reported to the FTC. The FBI's IC3 notes that tech support fraud caused over $924 million in losses in 2023, with victims over 60 representing the majority.
Red Flags
- Invoice for a Norton subscription you never purchased
- Charges a specific large amount ($299-$499) to create urgency
- Includes a phone number to call instead of an online cancellation option
- Sender address is not from @norton.com or @nortonlifelock.com
- Claims the charge will process automatically within 24 hours
The key indicator is the callback mechanism. Legitimate software companies allow you to manage subscriptions through your online account — they don't require you to call to cancel.
What You Should Do
What To Do
- Do not call the phone number in the email
- Do not give anyone remote access to your computer
- Check your bank or credit card statement — the charge is not real
- If you have a Norton account, log in at my.norton.com to check your subscriptions
- If you already called and gave remote access, disconnect your computer from the internet immediately
How to Verify Legitimately
If you have a Norton subscription, sign in to your account at my.norton.com to check your subscription status and renewal date. You can also check your bank or credit card statement — if there is no pending charge, the invoice is fake. Norton manages all billing through your online account, not through invoice emails with phone numbers.
Sources
- FBI Internet Crime Complaint Center (IC3) 2023 Report — Tech support fraud losses ($924 million)
- FTC Consumer Sentinel Network — How to spot, avoid, and report tech support scams