"Your Norton Subscription Has Expired" Email Scam
Scam email subject line
Your Norton 360 subscription has expired — renew now
Known variants
Invoice: Norton AntiVirus renewal $289.99
Your device is at risk — Norton subscription lapsed
URGENT: Your Norton protection has ended
Norton LifeLock renewal confirmation #[number]
Action required: Norton account suspension notice
Fake Norton antivirus renewal emails are among the most common tech support invoice scams. FTC secured $25.5M in refunds from tech support scam victims in March 2025. These emails use alarming language about device security to pressure callbacks.
Reports
Part of $1.46B tech support fraud losses (FBI IC3 2024)
First documented
2020
Last active
2026-03
⚠ Email subject lines can be spoofed or randomized. Scammers frequently vary subject lines to evade spam filters. This page documents a subject line pattern reported to official government agencies. It is not a factual determination about any specific sender. Contact [email protected] if you believe your organization is listed in error.
Who this email pretends to be from
What this scam email says
Email claims your Norton 360 or Norton LifeLock subscription has expired and your device is now unprotected. Includes a renewal charge of $200-$500 on your default card and a phone number to dispute it. Calling connects to a scammer who either collects payment for fake software or requests remote access under the pretext of 'removing the expired software.'
What this scam email looks like
From: [email protected] Subject: Your Norton 360 subscription has expired — renew now URGENT: Your Device Is No Longer Protected Your Norton 360 Deluxe subscription expired today. Your computer is currently unprotected from viruses and malware. Invoice #NRT-2026-48821 Renewal amount: $289.99 This charge will be applied to your card on file in 24 hours. To cancel or dispute this charge, call us immediately: 1-800-XXX-XXXX NortonLifeLock Billing Department norton-account-billing.com
Reconstructed example for educational purposes. Not a verbatim reproduction.
Scam email subject line variants
- •Your Norton 360 subscription has expired — renew now
- •Invoice: Norton AntiVirus renewal $289.99
- •Your device is at risk — Norton subscription lapsed
- •URGENT: Your Norton protection has ended
- •Norton LifeLock renewal confirmation
5 red flags
FTC secured $25.5M in refunds from tech support scam victims in March 2025
Real Norton renewal emails come from @norton.com — any other domain is fraudulent
Norton never charges your card for an unsolicited renewal without prior authorization
No antivirus company needs remote access to process a cancellation or refund
Urgency about device being 'at risk' is a pressure tactic
What to do
Do not call the number in the email
Check your real Norton subscription at norton.com — log in directly
Report to FTC at reportfraud.ftc.gov
Report to FBI IC3 at ic3.gov
Report this email scam
Source
FTC tech support scam alert; FTC recovered $25.5M from tech support victims (Restoro/Reimage settlement March 2025); FBI IC3 2024 — $1.46B tech support losses
https://www.ftc.gov/news-events/news/press-releases/2025/03/ftc-sends-more-255-million-consumers-impacted-tech-support-firms-scam ↗Fake sender domains used in this scam
Scammers impersonate legitimate brands using these fraudulent domains. If you received an email from one of these, it is a scam.
Related scam email patterns
People also search for
Frequently asked questions
Is an email with subject "Your Norton 360 subscription has expired — renew now" a scam?▼
Fake Norton antivirus renewal emails are among the most common tech support invoice scams. FTC secured $25.5M in refunds from tech support scam victims in March 2025. These emails use alarming language about device security to pressure callbacks.
What does this scam email say?▼
Email claims your Norton 360 or Norton LifeLock subscription has expired and your device is now unprotected. Includes a renewal charge of $200-$500 on your default card and a phone number to dispute it. Calling connects to a scammer who either collects payment for fake software or requests remote ac…
What should I do if I received this email?▼
Do not call the number in the email Check your real Norton subscription at norton.com — log in directly Report to FTC at reportfraud.ftc.gov
Who does this email pretend to be from?▼
This scam impersonates: Norton, NortonLifeLock, Norton Security, Symantec. FTC secured $25.5M in refunds from tech support scam victims in March 2025
Received a suspicious email?
Paste the email text or subject line — check it instantly, free.
Check your email →Source: FTC tech support scam alert; FTC recovered $25.5M from tech support victims (Restoro/Reimage settlement March 2025); FBI IC3 2024 — $1.46B tech support losses
First documented: 2020 · Last active: 2026-03
← Scam message database