top of page

The Antivirus Auto-Renew Fraud

Writer: Richard Stocks
Richard Stocks
Jul 21
2 min read

Flggd Scam School · Delivery, Refund & Logistics Scams · Lesson 15 of 16

An email says your antivirus auto-renewed for hundreds of dollars, and helpfully lists a refund number. If you're searching "antivirus charged my card refund number," stop before you dial.


The message looks like this

Example of an antivirus auto-renew refund scam email

Why this is a scam

Check your card statement: the charge isn't there. It never will be. The invoice exists only to make you call the number, because the phone call is where the real scam runs.

The "billing agent" processes your refund and asks for your card number, or asks to connect to your computer to "uninstall the software." From there it becomes the classic remote-access theft: fake refund screens, overpayment stories, and requests to send money back.

The price is set high on purpose. $349.99 stings enough that calling feels urgent.


Red flags checklist

  • An invoice for antivirus software you never installed or bought.

  • The charge is "coming soon" but absent from your statement.

  • A phone number is the only path to a refund.

  • Generic branding and a sender domain that matches no real product site.

  • The refund process involves your card number or your screen.


The manipulation tactic

Reciprocity under pressure. They created the "charge," then offer to undo it; accepting the favor walks you into their script.


What to do, and what not to do

  • Don't call the number in the invoice.

  • Check your card statement yourself. No charge, no problem: delete the email.

  • If a charge ever is real, dispute it with the number on the back of your card.

  • Never install remote-access apps for a refund.

  • Report the email as phishing.


Not sure about a message you've received? Check it in seconds with the free Flggd app.

bottom of page