An unexpected McAfee invoice lands in your inbox and claims that an antivirus subscription has renewed for $199.99, $399 or even more than $500. The amount is deliberately alarming, and the message gives you a phone number to call immediately if you want to cancel.
Do not call that number. This is a confirmed impersonation scam. The invoice is bait designed to make frightened recipients contact a fake support agent who may ask for card details, online banking access, gift cards or remote control of the computer.
Overview
The McAfee scam email is a phishing and tech-support scheme that misuses the name of a real security company. The recipient is told that a subscription has renewed, is about to renew or has expired. A fake invoice may list an expensive product, an order number and a customer-support telephone number. The message often says the charge will be processed unless the recipient cancels immediately.
The scam works because a large number of people have used antivirus software at some point, received it with a computer or cannot remember which subscriptions are active. Even recipients who do not use McAfee may worry that a family member made the purchase or that their card was stolen. That uncertainty is enough to trigger a rushed phone call.
The telephone number is the trap. McAfee’s official scam guidance says it will never require customers to call a phone number contained in an email or text message. A genuine account issue should be checked by typing mcafee.com into the browser and signing in directly, or by using the official support page. The number printed on an unexpected invoice should never be trusted as proof of authenticity.
Once the victim calls, the fake agent may ask to install remote-access software, sign in to online banking or complete a refund form. Some versions pretend to send too much money back, then pressure the victim to return the supposed difference. Others simply collect card details, account credentials or a payment for cancelling a subscription that never existed.
Our verdict
An unexpected McAfee renewal invoice that directs you to call the number in the message is a scam. Do not reply, click, open attachments or call. Verify the account independently through the official McAfee website and report the fraudulent email.
Common amounts and claims
- A McAfee subscription was renewed for $199.99, $399, $499 or more than $500.
- Your card will be charged within 24 hours unless you cancel.
- A refund is available only by calling the attached support number.
- The invoice is from McAfee Ultimate, Total Protection or another familiar-sounding product.
- A PayPal, Geek Squad or third-party invoice supposedly includes a McAfee purchase.
- The recipient must open an attachment to review or dispute the transaction.
How the McAfee Renewal Scam Works
Step 1: The fake invoice creates a financial emergency
The email uses a large amount and a short deadline to push the recipient into action. Logos, invoice formatting and legal-looking text make the message feel official. The scammers do not need every detail to be perfect; they need the reader to focus on the unwanted charge.
Step 2: The victim calls the number in the email
The number does not lead to McAfee. It connects to a scam call center or an individual pretending to be billing support. The agent may already know the name and email address from data leaks, which can make the conversation feel more convincing.
Step 3: Fake support asks for access or payment details
The caller is told that a special cancellation or refund procedure is required. The agent may request a card number, online banking login, one-time code or installation of AnyDesk, TeamViewer, UltraViewer or similar remote-access software. None of that is necessary to verify an antivirus subscription.
Step 4: The screen is manipulated to invent a refund problem
In refund versions, the scammer asks the victim to open online banking while connected remotely. The criminal may hide the screen, edit displayed text or move money between the victim’s own accounts to create the illusion of an excessive refund. The victim is then blamed for the error.
Step 5: The victim is pressured to send irreversible money
The fake agent demands that the difference be returned through gift cards, cryptocurrency, cash, wire transfer or a payment app. Urgency and threats are used to stop the victim from speaking to a family member or bank employee who would recognize the scam.
Step 6: The criminals return for more
Anyone who pays may receive follow-up calls from another supposed department, bank investigator or recovery specialist. The new caller may claim that another payment is needed to unlock a refund. This is the same criminal operation trying to extract more money.
How to Recognize a Fake McAfee Email
- The message arrives unexpectedly and you cannot match it to an active account.
- It says you must call a number inside the email or attachment.
- The sender address is unrelated to an official McAfee domain or is slightly misspelled.
- The display name says McAfee while the real address belongs to a free email service.
- The invoice uses an unusually large amount to provoke panic.
- The message contains grammar errors, strange spacing or inconsistent company details.
- A button or link leads somewhere other than mcafee.com.
- The agent asks for remote access, a password, a one-time code or gift cards.
How to Verify a McAfee Renewal Safely
- Do not use any phone number, link or attachment in the suspicious message.
- Open a new browser tab and type mcafee.com yourself.
- Sign in to the official account and check the subscription, renewal date and billing history.
- Review the card or bank statement for a completed charge; an email alone does not prove money was taken.
- If you need help, navigate to McAfee’s official support page from the website.
- Forward the suspicious message to scam@mcafee.com, then mark it as phishing in your email service.
What to Do If You Called the Fake Number
If you did not share anything
End the call and block the number. Do not answer follow-up calls claiming to be a supervisor. Delete the email after reporting it, then check your real McAfee account and financial statements independently.
If you installed remote-access software
Disconnect the computer from the internet and uninstall the remote-access tool. From a different trusted device, change the passwords for email, banking and other important accounts. Enable multi-factor authentication and run a full security scan before using the affected computer for sensitive activity again.
If you shared card or banking information
Call the bank using the number printed on the card or an official statement. Explain that the details were disclosed to a scammer, ask to block unauthorized transactions and replace the card or account credentials as advised. Do not wait for a charge to appear.
If you sent money
Contact the bank, payment app, wire service, cryptocurrency exchange or gift-card issuer immediately and ask whether the transfer can be stopped or flagged. Preserve the email, invoice, phone number, receipts and remote-session details, then report the fraud to the relevant national authority.
If you revealed a one-time code
Treat the associated account as compromised. Contact the institution immediately, change the password from a clean device, sign out other sessions and review security settings, recovery addresses and recent transactions.
The Bottom Line
McAfee is a real company, but the renewal invoice in your inbox may have nothing to do with it. The scammer’s objective is to turn fear about a fake charge into a phone conversation where much larger theft becomes possible.
Never call the number in an unexpected invoice. Verify the subscription through the official account, report the email to scam@mcafee.com and contact your bank immediately if you shared payment information or sent money.
