McAfee Billing Scam Subscription Renewal Email Invoice

A McAfee Billing Email Scam

Sent: Friday, July 17, 2026 at 01:28:29 PM EDT

Subject: Subscription renewal payment confirmed and processed

McAfee™

CHARGE NOTIFICATION

Date: Friday, July 17, 2026

Amount: $692.26

Hello,

Please find the ledger summary for your ongoing membership progression details.

Your account has registered a term adjustment for the One Year Premium Service Term, completed at $692.26.

A full PDF overview of this document has been attached to this message for your bookkeeping.

Please check when convenient, and reach out if you have questions or wish to make updates by contacting Toll-Free Customer Support at +1 (805) 843-2815.

Billed Info:

Customer ID: 0acc-ca52-f8d9

Invoice Code: CPZ4552CPZ0

You may cancel and request a refund within 12 hours by calling Toll-free +1 (805) 843-2815.

Please don’t reply directly. Use the support contact provided.

Kind Regards,

McAfee Billing Team

Robert Hopson

Customer Support: Toll-free +1 (805) 843-2815

How the Scam Works

• The Fake Invoice: You receive an official-looking email stating that your McAfee plan has auto-renewed for a large amount.
• The Bait: The message provides a "customer support" or "billing dispute" phone number, urging you to call within 24 hours if you wish to cancel and request a refund.
• The Trap (Callback Phishing): If you call the number, a scammer answers pretending to be a representative. They will ask you to download remote-access software (like AnyDesk or TeamViewer) onto your computer to "process the refund".
• The Theft: Once inside your system, they manipulate your online banking screen to stage a "fake overpayment" error (e.g., claiming they accidentally refunded you $5,000 instead of $500) and demand that you return the difference using gift cards, wire transfers, or cryptocurrency.

Signs of a Fake McAfee Email

• Urgent, Threatening Language: Demands immediate action to dispute charges or warns that your devices are heavily infected.
• Suspicious Sender Addresses: The display name says "McAfee," but clicking or hovering over the sender's name reveals a generic domain like @gmail.com or a lookalike address like @mcafeesubscriptions.net.
• Generic Greetings: Messages start with "Dear Customer" or "Dear User" instead of your actual name.
• Mismatched Branding: The email may mention McAfee but come from an Intuit or PayPal invoice template, or wildly mix up logos from competitors like Norton.
• Insistence on a Phone Call: Real tech companies do not mandate that you resolve billing matters exclusively by calling a phone number embedded in a text or email.

What You Should Do

• Do not call the number: Avoid dialing any phone number listed in the suspicious email or message.
• Do not click links or open attachments: Fake invoices frequently contain PDFs embedded with malware or links directing to credential-harvesting phishing sites.
• Check your actual bank account: Log directly into your credit card or bank portal. If there is no matching charge pending on your statement, the email is completely fake and you can safely delete it.
• Verify through official channels: If you think you might have a real subscription, navigate directly to McAfee's Official Website in your web browser to check your billing history and account status.
• Report the fraud: Forward the phishing email directly to McAfee's automated review system at scam@mcafee.com.

If You Already Engaged With Scammers

• Disconnect from the Internet: Unplug your Wi-Fi or internet router immediately if you granted them remote access to your device.
• Contact Your Bank: Call the direct fraud line on the back of your credit or debit card immediately to freeze your accounts and dispute unauthorized transactions.
• Uninstall Remote Programs: Check your applications list and delete any remote access tools the scammers made you download.
• Run a Malware Scan: Utilize trusted security software to run a full system scan and clean out hidden threats.