What it means
A fabricated subscription renewal message may display a total, order number and familiar security-company branding. Those elements are controlled by the sender. The card or bank record and the genuine vendor account are separate evidence of whether a charge exists.
A real-world example
An email claims a $399 renewal and says to call within 24 hours. The recipient's card activity and vendor account show no subscription or transaction.
What to do
Open the financial account directly and compare the claimed amount and merchant. If there is a real unauthorized charge, contact the card issuer; if not, report the message without calling its number.
The distinction that matters
A pending authorization is not always a final settlement, and a real renewal may be disputed. Neither situation justifies giving remote computer access or one-time codes to the email's callback number. Use established vendor and bank channels for resolution.
FTC tech-support renewal pattern
