Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Webroot Scam Antivirus Payment Cancellation Text

Scammers are sending fake "Webroot" renewal text messages to potential victims, asking them to call a fake customer service telephone number. The scam claims a payment has been made and asks recipients to call fake Webroot customer service telephone numbers linked to call centers operated by scammers. The scammers will pretend to be from Webroot and ask potential victims to disclose their personal and financial information, which they will use fraudulently. They may also ask potential victims for remote access to their computers.

The Scam Text

Thank you for your recent renewed with webroot antivirus - processed successfully - Amount Three Hundred Seventy five US Dollar - If you didn't authorize this payment want to cancel invited you to join 24/7 inquiry +1(806) 584 3290

Common Scams

  • Fake Invoices & Billing Notifications: You may receive an email claiming you’ve been charged $200–$500 for a Webroot subscription you never ordered. The goal is to get you to call a fake support number to "dispute" the charge.
  • Tech Support Scams: Fraudsters may call you or show pop-ups claiming your computer is infected. They pretend to be Webroot or Microsoft technicians and ask to remotely access your device.
  • Phishing Emails: Scammers send emails that look like official Webroot communications, often containing links to fake login pages or malicious attachments.
  • Refund Fraud: Scammers may claim they overcharged you and need your bank details or remote access to process a "refund".

Red Flags

  • Unsolicited Contact: Webroot and other legitimate tech companies never make unsolicited phone calls to customers.
  • Urgency and Scare Tactics: Language like "Immediate Action Required" or "Your Account Will Be Suspended" is a hallmark of phishing.
  • Suspicious Sender Addresses: Check the email address. Scammers often use generic Gmail accounts or domains that look slightly "off" (e.g., support-webroot.com instead of webroot.com).
  • Requests for Unusual Payment: Legitimate companies will never ask for payment via gift cards, cryptocurrency, or wire transfers.

If You've Been Targeted

  1. Do Not Click or Call: If you get a suspicious invoice, do not use the links or phone numbers provided.
  2. Verify Directly: Log in to your Webroot account through a trusted browser bookmark to check your actual subscription status.
  3. Contact Your Bank: If you shared financial information, contact your bank immediately to freeze your accounts and dispute any charges.
  4. Scan Your Device: If you gave a stranger remote access, run a full scan with a trusted antivirus (like the real Webroot or Windows Defender) or consider a factory reset.
waiting