Payment Confirmation Scams

Scammers often send fake emails or messages claiming a recent payment or service renewal has been successfully processed. These messages typically urge you to call a phone number or click a link if you didn’t authorize the payment or want to cancel the order.

What Scammers Want

  • To trick you into sharing sensitive information over the phone or online
  • To steal your credit card or banking details
  • To convince you to grant remote access to your computer
  • To charge you for fake services or subscriptions

Sample Scam Message

This scam is commonly carried out by fraudsters impersonating companies like Norton, McAfee or Geek Squad, sending fake order confirmations or receipts. Their goal is to get you to call a “support” number where they attempt to gain remote access to your computer or steal personal and financial information.

A typical email might look like this:

Subject: Your Norton 360 Annual Renewal Order Has Been Processed

Dear Customer,

Thank you for renewing your Norton 360 Protection Plan. Your account has been charged $349.99 for the annual renewal.

Order #: NTX-882731
Date: May 19, 2025
Payment Method: Auto Debit

If you have any questions or wish to cancel this renewal, please contact our billing team at +1 (800) 555-1234 within 24 hours.

Thank you for choosing Norton Security.

— Norton Billing Team

Common Signs of These Scams

  • Payment confirmations for services or subscriptions you never ordered
  • Urgent language prompting immediate action to avoid charges
  • Phone numbers that lead to scammers posing as support agents
  • Links to phishing sites mimicking real service providers

Key Red Flags

  • You don’t have an account or subscription with the company mentioned
  • No secure portal or official support channels are referenced — the phone number is the only way to cancel
  • The email uses vague product details and a generic greeting
  • Language prompting you to “call immediately” or “confirm cancellation” to avoid further charges
  • A false sense of urgency, such as “respond within 24 hours”

How to Protect Yourself

  • Don’t call phone numbers or click links in unsolicited messages
  • Log in directly to the service provider’s official website to check account status
  • Use verified contact information from previous invoices or the provider’s website
  • Report suspicious emails to the company and appropriate authorities