If an unexpected McAfee or Norton invoice tells you to call a number to cancel a renewal or obtain a refund, treat it as a scam until you verify it independently. The invoice may be completely fabricated, and the real objective is often to get you on the phone, obtain financial information, gain remote access to your computer, or trick you into sending a fake “refund” back to the criminal.
Do not call, click, reply, install software, or pay through instructions in the message. First check your accounts through official channels, then use the response that matches what actually happened.
How the fake-invoice scam works
- A convincing notice arrives. It may say your subscription was renewed, your card was charged a large amount, or your protection will expire. It can arrive by email, text, voicemail, calendar alert, PDF invoice, PayPal request, or another trusted service.
- The message creates urgency. It may demand that you call within 24 hours or cancel before a payment is processed.
- You are routed to a fake representative. The phone number belongs to the scammer, even when the branding, invoice number, or sender address looks authentic.
- The caller seeks access or information. They may request card or bank details, account passwords, a one-time code, or remote-control software such as AnyDesk, TeamViewer, UltraViewer, or ScreenConnect.
- A fake refund follows. The caller may show a counterfeit refund form or claim an accounting error caused an over-refund.
- You are pressured to repay. Gift cards, cryptocurrency, wire transfers, bank transfers, payment apps, or cash are demanded. These payments can be difficult or impossible to reverse.
The FTC identifies fake McAfee and Norton renewal notices as a tech-support and refund-scam pattern: FTC guidance on spotting and avoiding tech-support scams. Norton describes the same fake-renewal messages and advises customers not to call numbers included in them: Norton’s warning about fake notifications.
Why criminals use McAfee and Norton’s names
These are familiar security brands, and many computers have had a trial or an automatically renewing antivirus subscription. A security-related bill also triggers fear: people may worry that refusing payment will leave their device unprotected. The brand name in a message proves only that someone is exploiting the brand; it does not prove McAfee or Norton sent the notice, and it does not indicate a data breach by either company.
#1 Best Overall
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 0.7 inches (5 x 18 mm) pieces; meets security level P-4 standards
- Shreds up to 8 sheets of 20-pound bond paper at a time; shreds credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 3 minute runtime and 30 minute cool down; if unit goes beyond max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; easy to empty 3.7 gallon bin
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
Warning signs that matter most
| Warning sign | Why it matters |
|---|---|
| You never bought the product | The invoice may be bait rather than a real bill. |
| A large, unexpected renewal amount | Shock is used to make you act before checking. |
| “Call immediately” or a short cancellation window | Urgency prevents independent verification. |
| A phone number or refund link in the message | It directs you to the scammer’s chosen channel. |
| A request for remote access | The caller could view files, passwords, browser sessions, and financial accounts, or install malware. |
| A request for a one-time code | The code may authorize an account takeover or payment. |
| Gift cards, cryptocurrency, wire transfer, or “send back the excess” | These are common, hard-to-reverse payment demands. |
| A matching caller ID or polished grammar | Caller ID can be spoofed, and professional-looking messages can still be fraudulent. |
A legitimate platform can also carry a fraudulent invoice or payment request. Norton warns that fake order notifications have appeared through third-party apps and services. The platform’s presence is not proof that the underlying request is genuine.
Is there really a charge?
Separate the authenticity of the message from the existence of a transaction. Without using the message, inspect:
Rank #2
- 【Cross Cut & Credit Card Paper Shredder】The cross cut shredder shreds paper into 5x14mm particles, achieving P-4 level security. Shreds up to 6 sheets at once without removing staples, also handling paper clips and credit card (one at a time)
- 【Continuous Performance】The operating time is 4 minutes, with a 20-minute cooling cycle. If the shredding time exceeds 4 minutes, the overheating indicator will light up. After a 20-minute cooling cycle, it can resume operation
- 【Easy to Clean & Place】 Bonsaii shredder’s head features a handle for easy lifting; the separate 3.4-gallon bin has a clear window for quick disposal. Compact dimensions (11.81" × 7.09" × 14.26") make it perfect for home and small office spaces, fitting neatly under desks.
- 【Easy Operation & Safety Features】Auto start/stop and manual-reverse functions protect the paper shredder from the frustration of paper jams. The overheat protection function effectively extends the lifespan of the shredder, The document shredder will stop working once you lift the head, ensuring your safety.
- 【1-Year Warranty】Bonsaii offers a 1-year warranty for your shredders for home use heavy duty. If you have any questions, please feel free to contact us. We test every shredder before shipping, so you may notice some paper shreds from the testing
- Your credit-card and debit-card statements.
- Bank transactions and pending payments.
- PayPal or other payment-service activity.
- Your official McAfee or Norton account, reached by typing a known address or using an official app you already installed.
- The original purchase receipt and the renewal terms.
If a real unauthorized transaction appears, call the bank, card issuer, or payment provider using the number on your card or its official website. Do not use contact information supplied by the suspicious invoice. A genuine subscription does not make the email genuine; verify the charge and contact official support independently.
What not to do
- Do not call the number in the invoice, reply, or use its cancellation link.
- Do not open an attachment or enter credentials on a linked page unless you independently establish that it is needed and genuine.
- Do not install remote-access software at a caller’s direction or read out an access code.
- Do not disclose passwords, PINs, card numbers, bank details, Social Security information, or one-time verification codes.
- Do not log in to online banking while someone can see or control your screen.
- Do not send a refund through gift cards, cryptocurrency, cash, a wire, bank transfer, or a payment app.
- Do not trust caller ID or the first support number found in a search engine. The FTC warns that search results can contain fraudulent support numbers: FTC advice on impersonator scams.
If you only received the message
- Leave it untouched. Do not call, click, reply, or download.
- Check your accounts independently for a transaction.
- Report the message as spam or phishing.
- Forward a suspicious Norton email to [email protected], as Norton recommends.
- Report the scam to the FTC at ReportFraud.ftc.gov, then delete it after preserving evidence if a dispute or report may require it.
Merely receiving or reading an email does not establish that your device was hacked. Risk rises if you clicked a link, opened an attachment, downloaded a file, entered credentials, installed software, or granted remote access.
Recommended Free Tools
Rank #3
- P-4 Level Security: Crosscut shredder for home office heavy duty can handle 12 sheets effortlessly per pass, make sure your important documents are securely shredded, can shred paper, credit card, staple or clips into 13/64*51/64 inches (5*20mm) tiny particles.
- 6-Minute Continuous Shredding: Based on the patented cooling system, Bonsaii paper shredder for home use heavy duty can run continuously for up to 6 minutes without worrying about overheating or slowing down, ideal paper shredder for home office use or small office use.
- Easy Operation & Safe Protection: Auto start/stop and manual-forward/reverse function protect the paper shredder heavy duty from the frustration of paper jams. Overheat protection helps you use paper shredder without worrying and prolong its lifetime. The document shredder will stop working once you lift the head, keeping you safe.
- Compact Sizes: The shredder for home office comes with a portable handle on the shredder head and a 5.5 Gal large transparent window wastebasket; with the compact size of 12.6*7.91*18.3 inches, you can place it in the corner or under the desk, it's perfect for home use or office use.
- Professional Service: Bonsaii provides 1-Year limited warranty for your shredders for home office heavy duty. If you have any questions, please get in touch with us.
If you called but shared nothing
End the call and block the number. Do not re-engage. Review financial accounts for unusual activity, inspect downloads and browser permissions if you clicked anything, remove any remote-access application that was installed, and change passwords if the caller may have seen them.
If you clicked, entered information, or installed software
Credentials or a one-time code
From a different trusted device, change the exposed password and any other account that reused it. Turn on multifactor authentication. Contact the affected bank, payment service, email provider, or other account owner immediately if a one-time code was disclosed; it may have authorized access or a payment. Check recovery email addresses, phone numbers, active sessions, new devices, and email-forwarding rules.
Rank #4
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 0.7 inches (5 x 18 mm) pieces; meets security level P-4 standards
- Shreds up to 8 sheets of 20-pound bond paper at a time; shreds credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 3 minute runtime and 30 minute cool down; if unit goes beyond max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; easy to empty 3.7 gallon bin
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
Remote access
- Turn off Wi-Fi and unplug Ethernet on the affected computer. End the call.
- Using a clean device, change passwords for email, banking, payment accounts, Apple, Google, Microsoft, your password manager, and social accounts.
- Contact your bank and card issuers and ask about protective actions.
- Review transactions, account settings, recovery methods, and unfamiliar devices.
- Uninstall the remote-access program and run a reputable security scan, preferably with a trusted technician.
- Consider a clean operating-system reinstall if the attacker had extensive control or installed unknown software.
- Preserve messages, phone numbers, receipts, payment records, and remote-access logs.
The FTC’s victim guidance covers payment, personal-information disclosure, and device access: What to do if you were scammed.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.If you sent money
| Payment method | Immediate action |
|---|---|
| Credit or debit card | Call the issuer immediately, explain that the payment resulted from a scam, and ask about dispute and card-replacement procedures. |
| Bank transfer or ACH | Contact the bank’s fraud department immediately; reversal is not guaranteed. |
| Wire transfer | Contact the bank and wire service at once and request a recall or fraud review. |
| Payment app | Report the transaction to the app and to the linked bank or card issuer. |
| Gift card | Contact the issuer immediately, keep the card and receipt, and provide the claim details. |
| Cryptocurrency | Notify the exchange and relevant providers. Crypto payments are typically not reversible. |
Speed matters, but no provider can promise recovery. Keep every receipt, transaction ID, conversation, and address. Report the incident at ReportFraud.ftc.gov; the FTC also lists 1-877-FTC-HELP (1-877-382-4357) for consumer reports.
Best Value
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 1.2 inches (5 x 30 mm) pieces; meets security level P-3 standards
- Shreds up to 12 sheets of 20-pound bond paper at a time, also can shred credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 9 minute runtime and 30 minute cool down; if unit goes over max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; 5 gallon bin reduces empty frequency
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
If personal information was exposed
- Change passwords from a clean device and enable multifactor authentication.
- Monitor bank, card, email, mobile, and payment accounts for changes.
- Contact each affected institution through a known official channel.
- Consider a fraud alert or credit freeze when Social Security or other identity information was exposed; it is not automatically necessary for every fake invoice.
- Use IdentityTheft.gov for identity-theft response steps.
Do you need new antivirus software?
Not merely because a fake invoice arrived. Antivirus and scam-protection tools can help identify malicious files or websites, but they cannot reverse a transfer or guarantee protection against social engineering. After remote access or an unknown installation, trusted technical help, account recovery, and bank fraud assistance take priority.
If you are comparing preventive software after the emergency is handled, check device limits, supported platforms, first-year versus renewal pricing, refund terms, and whether identity-monitoring features address your situation. U.S. offers observed August 18, 2026 included Norton 360 Standard at $39.99 for the first year ($94.99 listed renewal) for up to three devices, Norton 360 Standard; Norton 360 Deluxe at $49.99 for the first year ($124.99 listed renewal) for five devices, Norton 360 Deluxe; and Norton 360 with LifeLock Select at $99.99 for the first year ($189.99 listed renewal) for up to ten devices, Norton 360 with LifeLock Select. Prices and terms can change. McAfee’s page showed U.S. introductory offers of about $49.99 per year for McAfee+ versus a $149.99 comparison price and $89.99 versus $199.99 for McAfee+ Advanced; see McAfee’s official support and offer page. Those products are optional prevention, not a remedy for a fraudulent invoice.
How to contact the real company safely
Type the company’s known web address yourself, use an official app already on your device, or use documentation from an original purchase. Do not search casually for a phone number and assume the first result is genuine. Review the official account dashboard, subscription status, receipt, and payment method before discussing a charge.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →
