Tech Support Scams — Geek Squad, McAfee, and Norton Fakes Explained

David opened his email on a Tuesday morning and saw an invoice for $399.99 from Geek Squad. The email said his "annual protection plan" was renewing automatically. But David had never signed up for Geek Squad. He had never paid them a dime. His heart started racing.

He almost called the phone number in the email. Thank goodness he did not.

That email was a tech support scam — one of the most common and dangerous frauds targeting people over 60 today. And it is not just Geek Squad. Scammers also impersonate McAfee, Norton, LifeLock, and Microsoft to steal your money and personal information.

Let us break down exactly how these scams work, what they look like, and how you can protect yourself.

Why Tech Support Scams Are Everywhere

Here is the uncomfortable truth: tech support scams work because they exploit trust.

You have heard of Geek Squad. You know McAfee and Norton make antivirus software. You probably trust Microsoft. Scammers know this. They count on you recognizing these names and reacting before thinking.

According to the FTC, Americans lost over $1.3 billion to tech support scams in recent years. People over 60 are the most targeted group, and they lose the most money per incident.

These scams come through email, phone calls, pop-up warnings on your screen, and even text messages. They are relentless, and they are getting more convincing every year.

The Geek Squad Scam

The Geek Squad scam email is one of the most widespread tech support scams right now. Here is how it typically works.

You receive an email that looks like an official invoice from Geek Squad (which is the tech support service from Best Buy). The email says something like:

• "Your Geek Squad subscription has been renewed for $399.99"
• "Your annual protection plan will auto-renew today"
• "Call this number within 24 hours to cancel and get a refund"

The email often includes an official-looking logo, an invoice number, and a phone number to call. It looks surprisingly real.

But here is the catch: Geek Squad did not send that email. If you call the number, you reach a scammer pretending to be a Geek Squad agent. They will ask for remote access to your computer, your credit card number, or your bank details — all to "process your refund."

Some victims have lost thousands of dollars this way. The scammer might say they "accidentally refunded too much" and ask you to send money back via gift cards or wire transfer. It is a cruel trick.

If you want to learn more about spotting dangerous emails, check out our guide on how to spot scam emails.

The McAfee Scam

McAfee scams follow a very similar playbook. You get an email or a pop-up warning that says your McAfee subscription is expiring or has just been renewed for a large amount.

Common McAfee scam email subject lines include:

• "Your McAfee subscription has been renewed — $299.99 charged"
• "Action required: Your McAfee protection has expired"
• "Your device is at risk — renew McAfee now"

Some of these scams appear as pop-up warnings while you are browsing the internet. A big red screen suddenly appears saying your computer is infected and you need to call a number immediately. It looks terrifying, but it is completely fake.

The McAfee scam email will always include a phone number or a link. If you call the number, you reach a fake support agent. If you click the link, you might download malware or land on a phishing site that steals your login credentials.

Here is something important to remember: McAfee will never send you an unsolicited email demanding you call a phone number. If you have a real McAfee subscription, log into your account directly at mcafee.com to check your status. Never use a link or number from an unexpected email.

The Norton and LifeLock Scam

The Norton scam and Norton LifeLock scam work almost identically to the Geek Squad and McAfee versions.

You receive an email claiming your Norton or LifeLock identity protection subscription is renewing for $249.99 or $349.99. The email urges you to call immediately if you did not authorize the charge.

What makes this scam especially effective is that many seniors do use Norton products. So when the email arrives, it feels believable. You think, "Wait, did I sign up for that? I better call and check."

That moment of doubt is exactly what the scammer is counting on.

The fake Norton invoices often include:

• A professional-looking Norton logo
• An order number and transaction ID
• A "customer service" phone number
• Urgent language like "you will be charged within 24 hours"

If you currently use Norton or any antivirus product, the safest way to check your subscription status is to open the Norton app on your computer or visit norton.com directly. Never trust an email invoice you were not expecting. For help choosing legitimate protection, see our roundup of the best antivirus for seniors.

The Microsoft Scam

Microsoft scam calls have been around for years, and they are still going strong.

This one usually starts with a phone call. Someone with a professional-sounding voice says they are from "Microsoft Technical Support" or "Windows Security Center." They tell you that your computer has been sending error reports, that your system is infected, or that your personal data has been compromised.

Sometimes the scam starts with a pop-up on your screen that says something like:

• "VIRUS DETECTED — Call Microsoft Support Immediately"
• "Your computer has been locked — Call 1-800-XXX-XXXX"
• "Windows Security Alert — Do Not Shut Down Your Computer"

These pop-ups are designed to make you panic. They might even play an alarm sound or make your browser impossible to close. But here is the truth: Microsoft will never call you out of the blue. And those pop-ups are not from Windows — they are from malicious websites.

For more on phone-based scams, read our guide on phone scams targeting seniors.

How These Scams Actually Work (Step by Step)

Whether the scam comes from a fake Geek Squad email, a McAfee pop-up, or a Microsoft phone call, the playbook is almost always the same:

Step 1: They get you to call. The email, pop-up, or call creates urgency. You feel like you need to act right now.

Step 2: They build trust. The "agent" sounds professional. They might use your name or reference your computer type. They seem helpful and patient.

Step 3: They ask for remote access. They will ask you to download software like AnyDesk, TeamViewer, or UltraViewer so they can "fix the problem" on your computer. Once they have remote access, they can see everything on your screen.

Step 4: They "find" problems. With access to your computer, they open technical-looking screens (like Event Viewer in Windows) and point to normal system logs, claiming these are "critical errors" or "hacker activity." This is completely fake — every computer has those logs.

Step 5: They charge you. They ask for payment to "fix" the problems. This could be anywhere from $99 to $999. They might ask for a credit card number, a wire transfer, or even gift cards.

Step 6: Some come back for more. In some cases, scammers install hidden software on your computer so they can access it again later — or they call back weeks later pretending to offer a "refund" and steal even more.

It is a well-rehearsed con. And it works because each step feels reasonable in the moment.

6 Warning Signs of a Fake Tech Support Message

Here are the red flags that scream "this is a scam." If you see even one of these, stop and do not engage.

1. Extreme urgency. "Act within 24 hours or you will be charged." "Your computer will be locked." Real companies do not threaten you with tight deadlines in random emails.

2. A phone number you are told to call. Legitimate renewal notices direct you to your online account. They do not beg you to call a phone number.

3. Generic greetings. "Dear Customer" or "Dear User" instead of your actual name. Real companies you do business with know your name.

4. An unexpected charge. If you did not buy something, an invoice for it is almost certainly fake. Do not call to "cancel" — that is exactly what the scammer wants.

5. Requests for remote access. No legitimate company will ask you to download remote access software from an unsolicited email or call.

6. Payment by gift card or wire transfer. This is the single biggest red flag. No real company asks for payment in Google Play gift cards, Apple gift cards, or Bitcoin. If someone asks for this, it is 100 percent a scam.

What to Do If You Already Clicked or Called

If you have already interacted with a scammer, do not panic. Here is what to do right away:

If you gave remote access to your computer:

• Disconnect from the internet immediately (unplug your ethernet cable or turn off Wi-Fi)
• Run a full antivirus scan using your legitimate antivirus software
• Change your passwords for email, banking, and other important accounts — from a different device if possible
• Consider having a trusted local tech professional check your computer for malware or hidden remote access tools

If you gave them your credit card or bank information:

• Call your bank or credit card company immediately and report the fraud
• Ask them to freeze or cancel the affected card
• Monitor your bank statements closely for unauthorized charges

If you paid with gift cards:

• Contact the gift card company (Apple, Google, Amazon) and report the scam
• Unfortunately, gift card money is very difficult to recover, but reporting it still helps

If you shared personal information (Social Security number, date of birth, etc.):

• Place a fraud alert on your credit reports at all three bureaus (Equifax, Experian, TransUnion)
• Consider a credit freeze to prevent new accounts from being opened in your name
• Report the scam to the FTC at reportfraud.ftc.gov

Using a strong, unique password for every account makes it much harder for scammers to cause lasting damage. See our picks for the best password managers to make this easy.

How to Protect Yourself Going Forward

You do not need to live in fear. A few simple habits will keep you safe from the vast majority of tech support scams.

1. Never call a phone number from an unexpected email or pop-up. If you think the message might be real, go directly to the company website by typing the address into your browser. Look up their official support number there.

2. Keep your antivirus software updated. A good, legitimate antivirus program will catch many threats before they reach you. Make sure it is always running and up to date.

3. Do not let anyone you did not contact first access your computer remotely. If you need tech support, call a number you found yourself from the official company website — not a number someone gave you.

4. Talk to family or a trusted friend before acting. Scammers create urgency because they do not want you to think. If an email or call is pressuring you to act immediately, that is exactly when you should slow down and ask someone you trust.

5. Report scam attempts. Even if you did not fall for it, report the scam to the FTC at reportfraud.ftc.gov and forward scam emails to the real company. This helps protect others.

The Bottom Line

Real tech companies like Geek Squad, McAfee, Norton, and Microsoft will never send you a random invoice demanding you call a phone number. They will never cold-call you to say your computer is infected. And they will absolutely never ask you to pay with gift cards.

If something feels off, it probably is. Trust that instinct. Close the email. Hang up the phone. And talk to someone you trust before taking action.

You are smarter than these scammers think. Now you know exactly what to look for — and that knowledge is the best protection you will ever have.