McAfee scams: how to tell a fake pop-up or renewal email from the real McAfee

A McAfee warning on your screen can be the real thing, but is very often scammers posing as McAfee to gain trust and access. One immediate check: McAfee says it will never require you to call a phone number in an email, text, or on-screen notification. Check instead by opening the McAfee app or signing in at mcafee.com, with your address typed in yourself.

Already paid, installed something, or called a number? Skip to what to do now.

Are you dealing with the real deal or a scam?

Work this out before you do anything else. It takes about a minute.

The real McAfee app.

• Where it shows up: in a window or alert from software installed on the computer. Many new Windows laptops come with a McAfee trial, and its warnings about expiring protection are real, if dramatic.
• How to check: open the McAfee app yourself and see whether it says the same thing, or sign in at mcafee.com. On Windows, Windows Security, then Virus and threat protection, then “Who’s protecting me?”, then Manage providers shows what’s actually guarding the computer.

A fake pop-up or notification from a website.

• Where it shows up: in the web browser or the corner of the screen, sometimes after the browser is closed. It can appear on a Mac or PC that never had McAfee. It says viruses were found and your McAfee has “expired,” and it wants a click, a payment, or a phone call.
• How to check: the small print often names the browser (Chrome, Edge, Safari) or a website you don’t recognize. The FTC says security pop-up warnings from real tech companies never ask you to call a phone number.
• How to stop it: close it with the browser’s own controls, then block that site’s notifications (steps below).

A fake renewal email or text.

• Where it shows up: your inbox or your phone. It says you’ve been charged hundreds of dollars, or offers a big discount if you renew today, with a number to call or a link to click.
• How to check: sign in at mcafee.com yourself and look at your subscription, then your card statement. A claimed charge with no charge behind it is a scam. An offer or a reminder gets acted on only inside your account, never from the email.

How to stop McAfee pop-ups in your browser

These McAfee pop-ups are often very invasive, filling your screen and hard to dismiss. One Redditor opened their computer to find half their screen covered in virus warnings, but a scan found nothing because a website was using the browser’s notification feature to push scam messages that look like they come from the computer itself.

At some point a website asked permission to “show notifications,” and someone clicked Allow. From then on, that site can send messages to the corner of the screen even when you aren’t visiting it. Microsoft says notifications from a site you’ve allowed in Edge keep appearing even when Edge is closed.

Another Redditor was cleaning out old bookmarks on a Mac. One link redirected a few times and landed on a pop-up styled like an Apple system message: “5 virus detected,” and McAfee had expired the day before. The user had never had McAfee.

The goal of all of these is to get you on the phone. In January 2026, a San Diego man pleaded guilty to his part in a scheme that took more than $42 million from older Americans this way: pop-ups told users to call for technical support, the people who answered posed as Microsoft or McAfee then charged a few hundred dollars and later called back about a “refund” that set up a second scam.

What to do:

1. Don’t click anything inside it, and don’t call the number. The FTC and McAfee say security pop-up warnings from real tech companies never ask you to call a phone number.
2. Close it with the browser’s own controls. Close the tab or the whole browser. If the page has taken over the screen, use Task Manager on Windows or Force Quit on a Mac.
3. Block that site’s notifications.
   • Chrome: Settings, then Privacy and security, then Site settings, then Notifications. Under “Allowed to send notifications,” set any site you don’t recognize to Block. (Google’s steps)
   • Edge: Settings, then Privacy, search, and services, then Site permissions, then All sites. Pick any site you don’t know and set Notifications to Block. (Microsoft’s steps)
   • Safari on a Mac: Safari, then Settings, then Websites, then Notifications; set unfamiliar sites to Deny. Or System Settings, then Notifications, then Application Notifications, and switch off any site listed there. (Apple’s steps)
4. If you want reassurance, run a scan with the security software already on the computer (on Windows, that’s Windows Security). A website notification can appear even when a scan finds nothing. If you downloaded something or let someone connect to the computer, a clean scan isn’t enough; see what to do now.

Is McAfee a scam? The real app and its warnings

McAfee is real software from a legitimate company, and it isn’t a scam, but confusion comes because scammers borrow the name so frequently and the real app’s own warnings can be highly alarming (which resembles many scams). Many new Windows laptops come with a McAfee trial installed, and when the trial runs out, the app says so. PCWorld called those warnings misleading, pointing to messages like “Real-time protection is about to expire” on computers where Windows already has protection built in.

So the real McAfee isn’t something to fear, and it isn’t something you have to keep. Two honest choices:

• Keep it and pay for it, through the app or by signing in at mcafee.com, typed in yourself. Never through a link in an email or a pop-up, even one that looks like McAfee’s store.
• Uninstall it. On Windows:
  • Settings, then Apps, then Installed apps. Restart afterward; McAfee’s own instructions include a removal tool if pieces are left behind.
  • Then check Windows Security, Virus and threat protection, “Who’s protecting me?” Microsoft says Defender switches off while another antivirus is running and should come back on. If it hasn’t, turn on real-time protection there.
  • Note: Uninstalling doesn’t cancel a paid subscription. If you’re paying, turn off auto-renewal at mcafee.com too.

Either way, the decision belongs to the person who owns the computer, made on a quiet afternoon and not in the middle of a countdown. Urgency is always manufactured.

The fake McAfee renewal email

The fake emails take a few shapes:

• A charge you didn’t make, usually several hundred dollars, with a number to call to cancel.
• A deal: renew today for 89% off.
• An expired payment method, with a link to update your card. No phone number, and no way to know whose page the link opens.

Some mix in links to the real McAfee site to look genuine, so one real-looking link proves nothing.

The discount version:

Two things should stop you:

• The deadline (real renewal notices don’t create fake urgency)
• The demand that you act from inside the email, whether that’s calling a number or “updating” a card (McAfee says it will never ask you to confirm personal details and never require you to call a number in an email or text)

How to check:

1. Sign in at mcafee.com, typed in yourself, and look at your subscription.
2. Look at your card statement.

If the email claims a charge and neither place shows one, it’s fake. Delete it or report it. If it’s an offer and you’re tempted, take it only inside your account. McAfee publishes a list of the addresses it sends from, but don’t judge by the sender alone. Checking your account is the test that works.

Does McAfee call you?

McAfee says it will never call to ask you to pay for customer service, and its customer service never asks for your Social Security number, address, or passwords. An unexpected call about your McAfee gets the same treatment as the email: hang up, then check through a route you find yourself.

If you need real support, start from the McAfee app or mcafee.com, typed in yourself. McAfee’s US support number is 1-866-622-3911 (phone and chat, around the clock). Save that number, because the FTC warns that tech support scammers get their own numbers into search results and ads, and we’ve seen it: “support” PDFs on unrelated university and government websites, directory sites with old or wrong numbers, fake help centers, and more.

If you do call a number from one of these messages, the FTC says the person who answers will often ask for remote access to your computer, or offer a “refund” that turns into a request to send money back. Our Geek Squad guide walks through that call.

Norton scam emails: same scam, different logo

Everything above applies to fake Norton and Norton LifeLock messages, which mostly arrive as invoices or renewal notices for a subscription you never bought. Norton’s own researchers have also seen them as calendar invites announcing a charge; when they called one of the numbers, the person who answered talked about their “McAfee subscription.”

Two Norton specifics:

• Norton lists the domains it sends from and asks you to forward a suspicious email as an attachment to spam@norton.com.
• Norton may send billing-failure notices and renewal reminders by mail, so a letter isn’t automatically a scam.

The check is the same as McAfee’s: sign in at norton.com, typed in yourself. If the message doesn’t match what’s on the account, don’t act on it. Still unsure? Ask Norton through its own support page.

If you paid, installed something, or called a potential scam

Close the pop-up or hang up first. Then follow whichever fits. Don’t feel foolish; these pages and calls are built by people who do this all day.

• You paid on a page you reached from a pop-up or email.
  • Call your card company on the number on the back of your card and ask them to stop or reverse the payment. Even if the page looked like McAfee’s store, you can’t be sure it was.
  • One Redditor who paid almost $200 after a pop-up then got a message asking whether they’d made the payment. Answer alerts like that through the bank’s app or the number on your card, never a link in the alert. Fake fraud alerts are a scam of their own, and a caller pretending to be your bank may ask for a code. Never read a code to anyone who calls.
• You installed something, or let someone onto your computer.
  • Disconnect it from the internet.
  • Call your bank on the number on your card and say someone had access to the computer, even if you don’t think you typed anything in.
  • From a different device, change your email password and your bank’s, plus anywhere you reused them. Turn on two-step verification where it’s offered.
  • Uninstall anything they had you install, then update your security software, run a scan and delete what it finds. A clean scan is a good sign, not a guarantee. If you’d rather have help, take it to a repair shop you choose.
  • Read the full first hour in what to do if you’ve been scammed.
• You called a number. Hang up and don’t call back, even if they call again. If you gave card or bank details, or the caller got onto your computer, follow the steps above.

Twenty minutes on your parent’s computer

Fake security warnings work on everyone. Still, in the FTC’s 2025 numbers, people 60 and over were more than four times as likely as younger adults to report losing money to a tech support scam, and a fake McAfee warning can be step one. Twenty minutes together, before any scary message shows up, means they’ll know where to look and what to ignore.

Next time you’re with your mom, dad, or another family member who uses a computer, ask if you can look at it together, with them at the keyboard:

1. Check what’s protecting it. On Windows, open Windows Security and look at “Who’s protecting me?” If there’s a McAfee trial, decide together whether to keep it, pay for it, or uninstall it.
2. Clear the notification list. Open the browser’s notification settings (the steps are above) and block every site neither of you recognizes. That ends the corner-of-the-screen messages from those sites.
3. Save the real routes. If they keep McAfee, bookmark mcafee.com, show them where the app lives, and put 1-866-622-3911 in their contacts as “McAfee support.” Agree that renewal messages get checked there and nowhere else.
4. Agree on the rule. A warning that wants a click, a payment, or a phone call gets closed, then checked in the app or with you.

Ask before you change anything, and leave them in charge. The point is that they know what normal looks like on their own screen, so a fake has less to work with.

One line to keep

That line is easy to say on a quiet afternoon and harder when the screen is flashing red and a countdown is running. That gap is what practice is for. ScamPrep provides realistic practice for older adults who opt in: scam emails, texts, and calls that feel real, with friendly coaching after a slip. How it works. To try it at home first, how to protect your parent from scams has a short exercise you both agree to.

How to report a fake McAfee or Norton message

• McAfee: forward fake emails to scam@mcafee.com, or call 1-866-622-3911, which is also McAfee’s support line.
• Norton: forward fake emails as an attachment to spam@norton.com.
• Your email app: use its “report phishing” or “report spam” button.
• The FTC: ReportFraud.ftc.gov, especially if you lost money.
• The FBI: ic3.gov, if you lost money or someone got onto your computer.

For everything else to do after a scam, see what to do if you’ve been scammed.