Norton LifeLock Scam Email Alert: Fake Renewal Notices Are Hitting Inboxes

You're looking at your emails when one of them makes you pause. It's an unexpected email saying that your Norton or LifeLock subscription auto-renewed for a few hundred dollars.

That's one of the most common brand-impersonation email scams happening. Scammers pretend to be Norton or LifeLock and try to trick you into sharing money or personal details.

This guide will show you how to tell whether the email is real and what to do next before you interact with it.

What the Norton LifeLock scam email looks like

The Norton LifeLock scam email usually looks like a polished billing notice. And it creates panic fast since you have no idea why you're getting charged.

One version of the phishing scheme says something like your subscription has "auto-renewed" or you receive a "renewal confirmation" notice. Attached is a fake invoice or order receipt that amounts to several hundred dollars. It's designed to make you act before that charge supposedly posts to your account. That panic leads unsuspecting consumers to reveal personal information and account details to scammers.

Another version wraps the same fake bill in a DocuSign-branded message. Scammers hope for a direct payment, but the email also includes a link or phone number to “dispute” the charge, and using either one is how they capture your financial information.

Scammers use social engineering to make the emails look like the real deal. They may use Norton logos or spoof the sender name so it looks like a legitimate email from Norton or LifeLock.

These are callback phishing scams: the whole point is to get you to call the number in the email. The “support agent” on the other end is the scammer, who will pressure you into sharing payment details, revealing passwords, or granting remote access to your device. That phone number — not a link — is usually the real trap.

How to tell if a Norton or LifeLock email is a scam

A legitimate logo, polished formatting, or even a realistic invoice isn't enough to prove an email is real. Learning to spot red flags can go a long way in preventing fraud. The most obvious signs usually involve pressure tactics and mismatched details.

Here are 7 red flags that you may have received a Norton or LifeLock phishing email:

1. Unexpected charge or renewal you never signed up for
2. An urgent demand to call a number right away
3. A phone number that doesn't match Norton's official contact information
4. Requests to confirm payment details, grant remote access, or buy gift cards
5. Generic greetings like "Dear customer"
6. Language that feels designed to scare you into acting fast
7. A domain that isn’t registered to Norton

The safest move is to not respond to the email or use any of the contact info it provides. Instead, sign into your Norton account from the official site (not the email). You can check your subscription and billing there.

Another option is to contact Norton customer support through your account. They can help verify the authenticity of an email you received.

What to do if you get (or fell for) the scam email

If you get a Norton LifeLock scam email, the best response will depend on whether you only received it or if you interacted with it. Here's what to do in either situation.

If you only received the email:

1. Don't call the number listed on the invoice or email. You should also avoid clicking on any links or opening attachments. Malicious emails can also contain hidden images, so it’s better not to open suspicious emails.
2. Report the email to Norton or LifeLock. Send the scam email as an attachment to avoid losing any part of the message. You can send it to spam@norton.com or spam@lifelock.com, depending on your service. Keep in mind, you might not see any additional updates on your report.
3. File a fraud report with the Federal Trade Commission (FTC).
4. Delete the scam email when you're done reporting it to Norton and the FTC.

If you already called or shared information:

1. Change passwords on any exposed accounts right away. Start with your email and bank accounts. If you used that password on multiple accounts, change those too.
2. If you shared your payment details with the scammer, block or replace the card.
3. Run an antivirus scan on your device and remove malware or anything suspicious.
4. Consider placing a credit freeze with the three major credit bureaus.
5. Monitor financial accounts closely for unusual transactions.

Bottom line

If a billing email seems off, log into your official Norton or LifeLock account and check your subscriptions there. Never call a phone number from an unexpected message, and don't respond to the email either.

Scammers rely on you panicking when you receive the scam Norton email. Taking a moment to pause and verify the email is usually enough to avoid falling victim to a scam.

Norton 360 and LifeLock are both industry leaders. Learn why we ranked Norton 360 as the best all-in-one antivirus software and LifeLock as the best identity theft monitoring service.

FAQs