Norton and McAfee renewal scams: spot a fake invoice

Scammers copy Norton and McAfee because millions of people use it. Here's how to tell a fake Norton and McAfee message from a real one, and what to do if you already clicked.

In short

Norton says its real emails never ask for passwords, Social Security numbers or card details, and they will not try to start remote access to your device out of the blue. McAfee says it will never make you call a phone number from an email or text, never call to charge you for customer service, and never ask for your SSN or passwords.

Most common fake: Invoice saying your antivirus subscription renewed for hundreds of dollars.

Safest check: Check the sender address: real Norton emails come from domains such as @norton.com, and McAfee lists its real sender addresses on mcafee.com.

Example · fake Norton and McAfee messageIllustrative, links disabled
Norton LifeLock: Your annual subscription has been renewed. Amount charged: $449.99. If you did not authorise this, call our cancellation desk within 24 hours: +1 (855) 555-0192. Order ID: NL-7734-2291
An example fake Norton and McAfee message with the warning signs highlighted.

What Norton and McAfee says

Norton says its real emails never ask for passwords, Social Security numbers or card details, and they will not try to start remote access to your device out of the blue. McAfee says it will never make you call a phone number from an email or text, never call to charge you for customer service, and never ask for your SSN or passwords. Source: Norton

Common fake Norton and McAfee messages

  • Invoice saying your antivirus subscription renewed for hundreds of dollars
  • Order confirmation with a phone number to call to cancel
  • Pop-up warning that your computer is infected and your protection has expired
  • Refund offer that needs remote access to your computer
  • Email from a free webmail address using the Norton or McAfee logo

Norton and McAfee's real web addresses

Genuine Norton and McAfee links and emails use these domains. Look at the part just before the first single slash: norton.com is real, but norton-support-center.com or norton.com.account-check.top are not.

  • norton.com
  • nortonlifelock.com
  • mcafee.com

Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.

How to check a Norton and McAfee message safely

  1. Check the sender address: real Norton emails come from domains such as @norton.com, and McAfee lists its real sender addresses on mcafee.com
  2. Sign in to your Norton or McAfee account yourself to see your actual subscription
  3. Do not call numbers in the message or allow remote access
  4. Look for a real charge on your bank or card statement

How to report a fake Norton and McAfee message

Also report it to the official fraud service in your country. See the worldwide list.

If you clicked, paid or shared details

Act quickly. It makes a difference.

  1. If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
  2. If you entered a password, change it on the real Norton and McAfee website or app and turn on two-step verification.
  3. Expect follow-up calls or messages pretending to help. Never share one-time codes or move money to a "safe account".
  4. Report the scam, then delete the message.

More help: Tech support and remote-access scams and what to do after a scam.

Questions people ask

Does Norton and McAfee send messages asking for payment or personal details?

Norton says its real emails never ask for passwords, Social Security numbers or card details, and they will not try to start remote access to your device out of the blue. McAfee says it will never make you call a phone number from an email or text, never call to charge you for customer service, and never ask for your SSN or passwords.

How can I check if a Norton and McAfee message is real?

Check the sender address: real Norton emails come from domains such as @norton.com, and McAfee lists its real sender addresses on mcafee.com. Sign in to your Norton or McAfee account yourself to see your actual subscription. Do not call numbers in the message or allow remote access. Look for a real charge on your bank or card statement.

How do I report a fake Norton and McAfee message?

Forward fake Norton emails as an attachment to spam@norton.com. Send fake McAfee emails or content to scam@mcafee.com. Report the scam to the Federal Trade Commission at ReportFraud.ftc.gov.

I clicked a link in a fake Norton and McAfee message. What should I do?

Don't enter anything else. If you typed card or bank details, call your bank now using the number on your card. If you entered a password, change it on the real website and turn on two-step verification. Then report the message and delete it.

Official sources and further reading

We check our pages against official advice from the organisations themselves and from government agencies.