Skip to content

Companies

McAfee scams: how the fake messages work

McAfee scams typically involve fraudulent emails, fake browser pop-up warnings, or unsolicited phone calls falsely claiming a user's cybersecurity subscription has expired or incurred an automatic renewal charge. Scammers use alarming warnings of computer viruses or fake overpayment refunds to trick victims into calling toll-free numbers, handing over remote access to their devices, or disclosing banking credentials.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by McAfee. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the McAfee message real?

McAfee contacts customers via official emails originating from verified domains (@mcafee.com) for subscription notices, service alerts, and account management. McAfee never cold-calls customers out of the blue demanding immediate remote access to computers, never asks users to install third-party remote desktop software (such as AnyDesk or TeamViewer) to process refunds, and never demands payment via cryptocurrency, gift cards, or wire transfers.

According to the Federal Trade Commission's June 2026 report on imposter scams, the FTC received more than 1 million consumer reports about imposter scams in 2025, with reported losses increasing by nearly 20% to $3.5 billion as part of $15.9 billion in total fraud losses. Source: How To Spot, Avoid, and Report Tech Support Scams.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Fake Subscription Renewal InvoiceEmailCredit card details, bank login credentials, or direct bank transfer under the guise of processing a refund.
Pop-up Virus Alert & Toll-Free LockPop-up / BrowserRemote desktop access to the victim's computer, installation of malicious software, and theft of banking credentials.
Overpayment Refund Scam ("Tech Support Refund")Phone / SMSRemote access via AnyDesk or TeamViewer, tricking the victim into logging into online banking where the scammer alters transfer amounts to steal funds.
Fake McAfee Antivirus App UpdateSocial / QR / App StoreMalware installation, ad fraud, or subscription hijacking through rogue payment portals.
03

What do the fake messages actually say?

We are not quoting example wording on this page. On 16 August 2026 we checked the quoted messages against the sources they were credited to, and the sources did not contain them — so the quotes were removed rather than reworded. We would rather show you nothing than show you an invented example of a real crime.

The exact wording changes constantly anyway. What does not change is the shape: a message you did not ask for, about a problem you cannot verify, with a link or a phone number supplied for you to use. Do not use either — reach the company the way you normally would.

04

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The genuine McAfee account dashboard (mcafee.com) always displays your exact renewal date, registered email, and active device count; fake emails and invoices never display your real account details or actual masked payment card numbers.
  • Genuine McAfee software notifications originate directly from the installed desktop or mobile application interface, never from full-screen browser warning pop-ups or random web page alerts locking your browser window.
  • McAfee customer support representatives will never initiate an unsolicited phone call or text message asking to remotely access your computer to issue a refund or cancel a subscription.
  • Official McAfee billing emails originate strictly from @mcafee.com domains; phishing emails use lookalike domains (e.g., @mcafee-support-billing.com, @mcafee-renewals.net, or free webmail providers).
  • Authentic McAfee invoices or support staff will never demand payment via cryptocurrency, wire transfers, peer-to-peer payment apps, or retail gift cards.
05

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • Disconnect immediately, close all browser windows, clear your browser cache, and run a full offline scan using legitimate antivirus software. Forward the suspicious email to scam@mcafee.com.
  • Immediately log into your official McAfee account at https://www.mcafee.com to change your password. If banking credentials were shared, contact your bank or credit card issuer instantly to freeze accounts and place fraud alerts. File a report with the Federal Trade Commission at https://ReportFraud.ftc.gov and https://IdentityTheft.gov.
  • Call your bank or credit card company immediately to report fraudulent charges, request a chargeback, and halt pending wire or P2P transfers. File an official complaint with the FBI Internet Crime Complaint Center at https://www.ic3.gov and the FTC at https://ReportFraud.ftc.gov.
  • Immediately disconnect your computer from the internet (unplug Ethernet or disable Wi-Fi). Shut down the computer. Have a trusted IT professional or security technician wipe the hard drive and perform a clean operating system reinstallation, as scammers may have installed persistent remote-access trojans (RATs) or keyloggers. Change all online banking and email passwords from an uncompromised, clean device.
06

Where do you report it?

Forward suspicious emails to scam@mcafee.com or call customer support at 1-866-622-3911. Fraudulent websites and identity theft can also be reported to https://ReportFraud.ftc.gov and https://IdentityTheft.gov.

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

07

Sources