All scamsTech Support

Fake subscription renewal / refund scam

A Geek Squad or Norton 'invoice' for a renewal you never bought.

How it works

A plain-text invoice lands in your inbox for an antivirus or support plan renewing at $399, with a phone number to cancel. Call it and a 'refund agent' asks for remote access to process the money back, then fakes an overpayment and pressures you into returning the difference in gift cards or crypto.

Red flags

  • Invoice with no link, only a phone number to call
  • Charge for a product you never subscribed to
  • Agent asks to install AnyDesk, TeamViewer, or UltraViewer
  • 'We refunded you too much — please send the difference back'

Real-world example

"Invoice #GS-88214. Geek Squad Total Protection has auto-renewed for $399.99. To cancel, call 1-888-555-0142 within 24 hours."

What to do

  1. 01Don't call the number. Check your real card statement and account instead.
  2. 02Never grant remote access to your computer to an inbound caller.
  3. 03If you installed remote software, disconnect, uninstall it, and change your banking passwords.
  4. 04Report it and mark the email as phishing.

Related scams

Got a message that looks like this?

Paste it into the detector for a personalised analysis and next steps.

Open the detector

Weekly scam alerts

The scams to watch this week, in your inbox.

A short Friday email with the most-reported new tactics. No spam, unsubscribe anytime.