An email 'confirming' a $300–$500 auto-renewal for Geek Squad, Norton, or McAfee — with a number to call if you didn't authorize it — is a refund scam, not a real bill. Paste it for an instant read.
There is no subscription. The fake invoice is bait: when you call the number to 'cancel' or 'dispute' the charge, the scammer — posing as support — talks you into giving remote access to your computer or your banking login to process a 'refund', then steals money or fakes an overpayment to claw funds back out of your account. The official-looking invoice and a trusted brand name are the entire trick.
Don't call the number on the email or click any links. You weren't actually charged — check your real bank or card statement to confirm. If you do use the service, log in to your real account directly. Delete the email and report it at reportfraud.ftc.gov.
Yes, if it's an unexpected invoice for a subscription you don't have, with a phone number to 'cancel'. It's a refund scam — calling leads to remote-access or fake-refund fraud. Don't call; check your real statement instead.
If you gave remote access, disconnect the device from the internet, run security software, and change passwords from a different, clean device. If you shared bank details or were 'given a refund', contact your bank immediately — overpayment refunds are a trick to reverse money out of your account.
This guidance is compiled from official U.S. government sources. For your specific situation, verify directly:
Last reviewed 2026-06-24. How we check & who's behind this →