I got an invoice for a Geek Squad or Norton renewal I don't remember buying, is it real?

Check your actual bank or card statement first — not the invoice itself. If no such charge appears, the invoice is fake. Never call the number listed on the invoice; look up the real company's support number independently.

I called the number and let them access my computer, what now?

Disconnect your computer from the internet immediately and run a full malware scan, or have it professionally checked. Contact your bank to watch for unauthorized transactions, and if you sent gift cards or money, report it at ReportFraud.ftc.gov — recovery is unlikely but reporting helps.

Geek Squad/Norton Renewal Scam: The Fake $399 Invoice (2026)

The rule that stops this scam: check your actual bank or card statement before reacting to any invoice. Never call the number printed on the invoice — look up the real company's support line independently.

How the scam works

Step 1

The fake invoice

An official-looking bill for $299-$499, claiming a subscription auto-renewed — for a service you may never have used.

Step 2

The call to "billing"

The invoice pushes you to call a number to dispute the charge or get a refund — reaching the scammer directly, not the real company.

Step 3

The remote access

The "agent" offers a refund but needs to connect to your computer to "process" it — granting them direct access.

Step 4

The overpayment trick

They then claim to have refunded too much "by mistake," pressuring you to repay the difference in gift cards — while quietly installing spyware or accessing your bank accounts.

How to spot it

An invoice for a subscription you don't remember buying, especially at a suspiciously specific amount like $299 or $399.
A phone number embedded in the invoice itself — the real company's number is never inside a suspicious bill.
Any request to remote-control your computer to "process" a refund.

What to do

Check your actual bank or card statement before reacting — the charge likely doesn't exist.
Never call the number on the invoice; look up the real company's support line independently.
Never let anyone remote-control your computer based on an unsolicited invoice.
If you've already been scammed, disconnect your computer, run a malware scan, watch your bank statements, and report it at ReportFraud.ftc.gov.

Egidio: your automatic phishing detector

These invoices often arrive by text with a follow-up phishing link. Egidio catches that link before it can do anything.

Egidio screens incoming calls and scans links arriving through your messaging apps in real time and blocks known fake tech-support and billing pages the moment they're recognised.

Install Egidio