Is that Geek Squad or Norton renewal email a scam?
The Geek Squad / Norton renewal scam is one of the longest-running and highest-volume email frauds in circulation. You receive an invoice — typically for $299 to $500 — for an annual 'Geek Squad Total Protection' or 'Norton 360' renewal you never signed up for. The email includes a bold phone number to call 'to cancel the renewal and get a refund'.
When you call, you're connected to a fake support agent. They offer to issue a refund by remotely accessing your computer 'to process the return'. Once they have remote access, they either install malware, steal stored passwords and banking credentials, or run a fake bank portal overlay to trick you into believing they accidentally sent too much — and you now need to wire back the difference via gift card.
Best Buy and NortonLifeLock have both issued public warnings about these scams. The emails have nothing to do with either company.
🚩 Red flags to watch for
- ▶You have no active subscription with Geek Squad, Norton, or Best Buy — you never signed up for one.
- ▶The email prominently features a phone number as the only way to 'cancel' rather than directing you to a website account.
- ▶The sender address isn't @bestbuy.com or @norton.com — it's commonly a random Gmail, Outlook, or a lookalike domain like bestbuy-support.net.
- ▶The invoice discourages visiting the website — the entire mechanism is designed to get you on the phone.
- ▶The renewal amount ($299, $399, $499) is specific and large enough to feel alarming, but not so large as to seem absurd.
- ▶No corresponding purchase confirmation exists in your email from when the subscription allegedly began months ago.
✅ What to do
- 1Do not call the number. This is the core mechanism of the scam — the phone call is where the fraud actually happens, not the email.
- 2If you have a genuine Norton or Best Buy account, log in directly at norton.com or bestbuy.com to check your subscriptions — do not use any link from the email.
- 3Delete and block the sender.
- 4If you already called and gave remote access to your computer: disconnect from the internet immediately, run a full security scan (Malwarebytes free edition is a reliable starting point), change passwords for your email, banking, and important accounts.
- 5If you paid via gift card: call the card issuer immediately — recovery is unlikely but some issuers freeze funds if you report quickly.
📣 Where to report (by country)
🇺🇸 United States
🇬🇧 United Kingdom
- Action Fraud
- Police Scotland — call 101
🇦🇺 Australia
🇨🇦 Canada
🌍 Everywhere else
- Contact your local police and your bank immediately
- If money was sent, ask your bank about a recall request — act within hours
Got a suspicious message right now?
Paste it into our free AI checker for an instant pattern analysis
No account needed · Free to try · Privacy-first
Check your message free →No tool is a guarantee. AI pattern detection is a guide, not a verdict — always use your own judgment.
Common questions
Why do scammers use Geek Squad and Norton specifically?
Both brands are widely recognised for tech support and security services, and many people have vague memories of once buying a tech support plan. The ambiguity makes recipients unsure — 'Did I sign up for this years ago?' — which increases the call rate.
I called the number and they had remote access for a few minutes. What should I do?
Assume the worst and act immediately: disconnect your computer from the internet, run a full malware scan, change your passwords from a different device, and check your bank and financial accounts for unauthorized access. Contact your bank if you gave any account information.
The invoice looks exactly like a real Best Buy receipt. How can it be fake?
Replicating a company's invoice template takes about 30 minutes in a basic design tool. The visual design tells you nothing. The sender address and the phone number are the things to check — neither will be real Best Buy contact details.