Norton renewal scam emails: you weren’t charged
An email saying your Norton or LifeLock subscription renewed for hundreds of dollars, with a billing number to call to cancel or get a refund, is a scam.
Norton describes the pattern: the caller asks for your card, bank or PayPal details “to process a refund”, or asks to connect to your computer. Norton says official support is free to subscribers, never calls you out of the blue, and won’t try to take over your computer from an email.
What it looks like
An example written by HARD, not a real message. Real ones change wording often.
Email from Norton Billing <norton.invoice@[a free email address]>
Order confirmation: Norton 360 Deluxe auto-renewal $349.99
Your subscription has been renewed successfully and will appear on your statement within 24 hours. To cancel and request a refund, call our billing department: +1 (888) 555-0177.
Check the one you got
Paste what you were sent. HARD checks it in this browser with the same rules as the Is this legit? check in its apps. Nothing you paste leaves this page.
How to tell it’s fake
“You will NEVER receive an unsolicited call from Official Norton Support”
NortonLifeLock
- It isn’t from a Norton address.
- Norton lists its real sending domains, such as norton.com, nortonlifelock.com, lifelock.com and mail.norton.com, and says it never emails from Gmail or other free providers.
- The fix is a phone call.
- A renewal you didn’t expect, a big price and a number to call is the whole scam.
- They want card or bank details for a refund.
- A real refund goes back to the card you paid with. Nobody needs your details again to send it.
- They want to connect to your computer.
- Norton says its emails won’t try to start a remote access session unprompted.
If you clicked, called or paid
- Hang up and don’t call back.
- If they connected to your computer, disconnect it from the internet and uninstall the remote-control app.
- Call your bank if you paid or typed in card details.
- Use the number on the back of your card, not one from the message. Ask them to block the card, dispute the charge and watch for more. The sooner you call, the better the chance of stopping it.
- Change your passwords from another device.
- Especially email, banking and PayPal.
- Report it.
- Forward the email to [email protected] as an attachment, then report it at ReportFraud.ftc.gov. Outside the US: Report Fraud in the UK (reportfraud.police.uk, which replaced Action Fraud), Scamwatch in Australia, the Canadian Anti-Fraud Centre in Canada. Forward scam texts to 7726 in the US, UK and Canada.
If it was your parents, read Look after your parents, and if a card number or password has gone, Breaches explains what each kind of leaked data lets criminals do.
The official way to check
- Sign in to your Norton account yourself.
- Your real subscription and its renewal date are there. Norton’s only support site is support.norton.com.
- Look at your card statement.
- No Norton charge, nothing to cancel.
Someone on the phone asking for money right now? Guides has the two-step answer. More scams by name are on Is this a scam?, and new ones reach the Situation Room.
Questions
Is the Norton auto-renewal email real?
If it’s from a free email address or asks you to call a number to cancel, no. Check your subscription by signing in to your Norton account, typed in yourself.
How do I report a Norton scam email?
Forward it to [email protected] as an attachment. Norton says you won’t get a reply. In the US, also report it at ReportFraud.ftc.gov.
Is the LifeLock “identity stolen” email real?
Norton lists fake LifeLock alerts asking you to verify details or pay as one of the scam emails it sees. Sign in to your LifeLock account yourself instead.
Sources
Sources checked on 7 Nov 2026.
- Norton: How to recognize and report Norton scam emails, 12 November 2025: the six kinds of fake Norton email, the real sender domains, [email protected], no remote access unprompted.
- NortonLifeLock: Tech support scams, read 7 November 2026: official support is free, no unsolicited calls, support.norton.com only.
- FTC: How to spot, avoid and report tech support scams, September 2025: fake renewal notices using the Geek Squad, McAfee and Norton names; requests for remote access; fake refunds.