Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Webroot Email Scam and Phishing - How to Protect Yourself
Webroot Email Scam and Phishing - How to Protect Yourself

The Webroot email scam is a phishing campaign featuring fake invoices for security services you did not order, aiming to steal credit card details via a fake support number. These emails use panic-inducing language, often originating from non-Webroot addresses, and may include malicious attachments.

Key Details of the Scam

  • The Hook: A "Subscription Activated" or "Order Confirmed" email indicates a high-cost, automatic charge for Webroot antivirus or "Premium PC Security".
  • The Goal: To get you to call a fake support number to "cancel" the charge, at which point scammers steal your personal/financial information.
  • Red Flags:
    • Emails sent from generic addresses (like Gmail) rather than legitimate Webroot domains.
    • Poor spelling, grammar, and urgent language.
    • Invoices that do not list specific products.

How to Protect Yourself

  • Do Not Call: Never call the phone number listed in the suspicious email.
  • Verify Independently: Contact Webroot directly through their official website if you are concerned.
  • Check Accounts: Review your bank or credit card statements directly, not via links in the email.
  • Report: Report the email to the FTC in the US, or equivalent authorities in your country, and notify Webroot Customer Support.

If you already interacted with them, change your passwords, scan your computer for malware, and contact your bank to freeze your card.

2

Comment sectionComments / Answers (2)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 2

by an anonymous user from: Dallas County, Dallas, Texas, United States

Scam... I received:

"Receipt Date: Monday, July 13, 2026
Receipt : 580485429

Webroot

Hey Klduncan,

We are writing to let you know that your Webroot membership has been renewed successfully for the upcoming 60 Months coverage period. Your payment of $578.89 has been processed, and your membership will continue with uninterrupted access to your selected services.

Account Purchase Record
* Plan: Premium Device Security
* Reference ID: 709888
* Coverage Period: 60 Months
* Quantity: x5
* Amount Received: $578.89

If you have any questions regarding your membership, payment records, or account information, please contact 1 (820) 465-3380.

This notification has been generated automatically and is provided for your account records."

Delete

by an anonymous user from: Orange County, Rancho Santa Margarita, California, United States

I got this email:
"Your Order #734269174 Successfully Updated
Webroot

HI ,

This message is to notify you that your Webroot membership is nearing its upcoming renewal date. Based on the renewal options currently linked to your account, a payment of $ 274.26 is scheduled for the next 1 Year membership period.

If you would like to review your membership preferences, make changes to your account, or need assistance before the scheduled renewal is processed, please contact 1 (805) 670-4235.

Invoice Details
Invoice : 734269174
Invoice Date: Saturday, July 11, 2026
Plan: SecurePath Elite - 806305
Coverage Period: 1 Year
Payment Amount: $ 274.26

If you have any questions regarding your membership or billing records, please contact 1 (805) 670-4235.

Truly thankful,,
Webroot, Powered By McAfee"

Delete

waiting