Norton LifeLock Scam Email: How to Spot the Fake Renewal Notice

The Norton / LifeLock scam email is the third variant of the antivirus renewal invoice scam — structurally identical to the McAfee and Geek Squad versions, but impersonating Norton (now merged with LifeLock under the NortonLifeLock and Gen Digital umbrella). Given Norton’s high brand recognition and LifeLock’s association with identity theft protection, the combination creates a particularly alarming fake invoice.

—

What the Norton LifeLock Scam Email Looks Like

The email typically claims your Norton 360, Norton AntiVirus, or LifeLock identity theft protection plan has been renewed — typically for $299 to $499. It includes a fake order confirmation number, states the charge will be applied to your payment method on file, and provides a toll-free phone number to call for cancellation.

Some variants specifically reference LifeLock to increase the apparent legitimacy, since LifeLock is a real identity protection service with real subscribers.

—

How to Identify a Fake Norton Email

Sender domain check: Real Norton and LifeLock emails come from @norton.com or @lifelock.com. Any other domain is fraudulent.

There’s a cancellation phone number: Legitimate software renewals don’t include emergency cancellation hotlines.

The email came unsolicited: If you didn’t recently purchase or renew a Norton product, an invoice from Norton is highly suspicious.

You’re not a subscriber: Many recipients of this scam have no Norton or LifeLock products.

—

What to Do If You Received This Email

Do not call the number. Do not click links or open attachments.

If you have a real Norton or LifeLock subscription and want to verify your billing: Go directly to norton.com or lifelock.com — type the address. Log into your account and check your subscription status and payment history.

If you already called and gave financial information: Contact your bank or card issuer immediately.

—

How to Report a Norton Scam Email

Report to Norton: norton.com — use their official support to report the fraudulent email.

Report to the FTC: reportfraud.ftc.gov

Forward to: spam@uce.gov

→ Back to Pillar: https://www.scammed.org/phishing/