Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Mcafee Renewal Scam - How to Protect Yourself
Mcafee Renewal Scam - How to Protect Yourself

The McAfee renewal scam is a prevalent phishing scheme where cybercriminals send fake emails, text messages, or browser pop-ups claiming your antivirus subscription has auto-renewed for a high fee. The primary goal of this scam is not to sell you software, but to trigger panic. Scammers want you to call a fraudulent "support line" listed in the message so they can trick you into giving them remote access to your computer, stealing your passwords, or draining your bank account through a staged "overpayment refund" loop.

Key Red Flags of the Scam

  • Embedded Phone Numbers: The email insists you must call a phone number to cancel the charge or get a refund. Legitimate services manage your billing through their official dashboard, not a phone call.
  • Suspicious Sender Address: The display name says "McAfee," but clicking on it reveals a generic or mismatched email address (like a gmail.com account or random characters).
  • Artificially High Prices: Fake invoices usually quote absurdly high renewal costs, often ranging from $299 to $499, to spark immediate panic.
  • Urgent Deadlines: The message will state that your card has already been charged or will be permanently billed within 24 hours if you do not react.
  • Self-Sent Phishing: A highly advanced variation involves emails where the sender's display name is spoofed to show your own name, making it look like a confirmation from your own activity.

What to Do If You Receive One

  • Check Your Real Accounts First: Look at your bank or credit card statements. If there is no pending charge matching the email amount, no transaction happened and the invoice is entirely fabricated.
  • Do Not Call or Click: Never dial the listed support number, download attachments (like fake PDF receipts), or click any links.
  • Verify on the Main Site: If you actually use McAfee software, open a clean tab, type McAfee's Official Website directly into your browser, log in, and check your actual subscription status.
  • Report the Scam: Forward fake emails using the brand name directly to scam@mcafee.com to help security teams track the campaign.
  • Block Browser Notifications: If you are seeing persistent "virus detected" pop-ups on your desktop, they are usually malicious browser notifications. Clear your browser's cookies and site permissions under settings to make them stop.

If You Already Interacted

  • Disconnect the Internet: If you granted remote access to your device, immediately shut off your Wi-Fi or unplug your internet cable to kill their connection.
  • Contact Your Bank: If you shared credit card or banking details, immediately call your financial institution's fraud department to freeze your cards and dispute unauthorized transfers.
  • Run a Security Scan: Use legitimate, trusted security software to scan your computer for any hidden remote access tools or malware the scammers may have dropped.
waiting