untrappable.Check

Norton email scam: is that renewal charge fake?

Editorially reviewed · Last updated September 8, 2026

Yes — this is a scam. The illustrated Norton notice uses look-alike addresses and a rushed refund route. Check the charge and subscription independently.

Exhibit · Email

Your Norton 360 subscription has been renewed — $429.99
N
Norton LifeLock Support
billing@norton-secure[.]info
8:42 AM
Your Norton 360 Deluxe plan auto-renewed today for $429.99. If you did not authorize this, you must cancel and request a refund within 24 hours: norton-billing-help[.]info/refund
Cancel & get refund
Illustrative email · not an original screenshot

Other versions you might get: Variants include a fake "we couldn't process your renewal" notice, a PDF invoice attachment with only a phone number, or a "refund processed — confirm your bank details" follow-up.

What to do right now

  1. Don't click the link or button, and don't call any number in it. The whole scam starts the moment you call.
  2. Check your account and payment records independently. Open norton.com yourself and review the relevant account, subscription, order, or payment. Check your card or bank statement too. If the claim is unclear, contact Norton through official support; the message alone cannot tell you whether a charge or restriction exists.
  3. Report it. File at reportfraud.ftc.gov, then delete the email and mark it as phishing.
  4. If you already called or installed anything: disconnect from the internet, uninstall any remote-access app (like AnyDesk or TeamViewer) they had you add, and call your bank to flag any payment or refund they walked you through.
  5. Change your passwords for email and banking if you shared anything, and turn on two-factor.

Reduce the risk of another scam

Do not use the message’s link to check the claim. Open the real service yourself. If you paid or shared account details, start with what to do after a scam. Blocking and reporting can reduce unwanted contact, but they cannot stop every attempt or tell you how the sender found you.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Compare free and paid protection →

No purchase needed. How we use evidence.

Frequently asked

How can I tell a real Norton renewal from a fake?
Open Norton and your bank or card account independently to check the subscription and charge. Scammers imitate renewal notices, but an absent transaction may also reflect timing or another account. Contact Norton through official support if unclear; do not use the suspicious email’s cancellation route.
The email says I was charged and to call within 24 hours to dispute — is that real?
A short deadline to call and dispute a charge is a known refund-scam pattern. Do not call the supplied number. Open Norton independently and verify the subscription and payment. A real support contact may involve a phone call, but it does not require you to trust a number from an unverified email or give a stranger remote access.
I already called the number or gave remote access — what now?
Disconnect from the internet and uninstall any remote-access app they had you add (like AnyDesk or TeamViewer). Call your bank or card issuer on the number on your card to flag or reverse any payment or “refund” they walked you through, and watch your statements. Change your email and banking passwords and turn on two-factor. Then report it at reportfraud.ftc.gov.
They said they refunded me too much and I sent gift cards — what now?
That's the scripted ending of this scam, not a mistake. The FTC describes the move exactly: after the spoofed refund page, they “claim there was an error in the amount entered,” say they refunded you too much, and insist you pay them back with gift cards, a wire transfer, crypto, or a payment app. Report the cards to the company that issued them right away — the FTC says to do it “no matter how long ago the scam happened” and to ask for your money back, since some issuers refund it or freeze a card that still has a balance. Keep the cards and the store receipts. Then call your bank about anything that left your account, and file at reportfraud.ftc.gov.

Sources

  1. 01How To Spot, Avoid, and Report Tech Support Scams— Federal Trade Commission
  2. 02How to Recognize and Avoid Phishing Scams— Federal Trade Commission
  3. 03Avoiding and Reporting Gift Card Scams— Federal Trade Commission
  4. 04What To Do if You Were Scammed— consumer.ftc.gov
  5. 05How To Recognize and Avoid Phishing Scams— consumer.ftc.gov

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.