untrappable

Norton email scam: is that renewal charge fake?

Editorially reviewed · Last updated July 20, 2026

Yes — this is a scam. Norton never sends renewal notices from "norton-secure.info," and a real refund never starts with a call-back number or a remote-access app.

Your Norton 360 subscription has been renewed — $429.99
N
Norton LifeLock Support
billing@norton-secure.info
8:42 AM
Your Norton 360 Deluxe plan auto-renewed today for $429.99. If you did not authorize this, you must cancel and request a refund within 24 hours: norton-billing-help.info/refund
Cancel & get refund
The Email, as received

Other versions you might get: Variants include a fake "we couldn't process your renewal" notice, a PDF invoice attachment with only a phone number, or a "refund processed — confirm your bank details" follow-up.

What to do right now

  1. Don't click the link or button, and don't call any number in it. The whole scam starts the moment you call.
  2. Check your real account and bank. Sign in at norton.com yourself or open your banking app — the charge won't be there.
  3. Report it. File at reportfraud.ftc.gov, then delete the email and mark it as phishing.
  4. If you already called or installed anything: disconnect from the internet, uninstall any remote-access app (like AnyDesk or TeamViewer) they had you add, and call your bank to flag any payment or refund they walked you through.
  5. Change your passwords for email and banking if you shared anything, and turn on two-factor.

How to make sure it never bites you

These emails land because your address is on breached lists that get resold, so more will follow — the fix is shrinking what one tap can reach. See how to lock down your accounts.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

How can I tell a real Norton renewal from a fake?
Check the charge, not the email. The FTC warns that scammers “send notices about automatic renewals for tech support subscriptions” and “use the names of well-known companies like Geek Squad, McAfee, and Norton” — a fake email invents a charge (often $400–$500) to panic you. A real subscription charge shows up in your bank statement and in your account when you sign in at norton.com yourself. If it's in neither place, the email is fake. Never judge it by the sender's display name — look-alike domains like norton-secure.info aren't norton.com.
The email says I was charged and to call within 24 hours to dispute — is that real?
No — the call-back number is the trap. The FTC lays out the exact playbook: “you must call a phone number within 24 hours if you want to dispute the charge. If you call, the scammers ask for remote access to your computer,” send you to “a spoofed website” to enter your bank or card details for a “refund,” then claim they refunded too much and pressure you to pay the difference back in gift cards. As the FTC puts it, real security messages “will never ask you to call a phone number.” To check a charge, contact the company on a number you know is real — never the one in the message.
I already called the number or gave remote access — what now?
Disconnect from the internet and uninstall any remote-access app they had you add (like AnyDesk or TeamViewer). Call your bank or card issuer on the number on your card to flag or reverse any payment or “refund” they walked you through, and watch your statements. Change your email and banking passwords and turn on two-factor. Then report it at reportfraud.ftc.gov.
They said they refunded me too much and I sent gift cards — what now?
That's the scripted ending of this scam, not a mistake. The FTC describes the move exactly: after the spoofed refund page, they “claim there was an error in the amount entered,” say they refunded you too much, and insist you pay them back with gift cards, a wire transfer, crypto, or a payment app. Report the cards to the company that issued them right away — the FTC says to do it “no matter how long ago the scam happened” and to ask for your money back, since some issuers refund it or freeze a card that still has a balance. Keep the cards and the store receipts. Then call your bank about anything that left your account, and file at reportfraud.ftc.gov.

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.