Is There a McAfee Scam Going Around? (2026 Alert)

Imagine opening your computer to check your email, browse the web, or finish something important, only to have a frightening security warning suddenly take over your screen. It claims your device is infected, your personal information is at risk, and you need to contact McAfee immediately. Then, just as you're trying to understand what's happening, another message appears claiming your McAfee Total Protection subscription has renewed for an unexpectedly large amount.

It's understandably stressful. You might wonder whether your computer has been hacked, whether your credit card has been charged, or whether ignoring the alert could put your files at risk. What's especially frustrating is that these messages can look surprisingly convincing, complete with familiar McAfee branding, official-looking invoices, and urgent instructions.

So, is there a McAfee scam going around? Yes. Scammers impersonate McAfee through fake renewal emails, browser notifications, phishing websites, and fraudulent technical support calls. The company itself is legitimate, but criminals exploit its recognizable name to steal money, passwords, and financial information.

This guide explains how these scams work, how to recognize a fake McAfee alert, and what to do if you've already clicked a link, shared personal information, or paid someone you believed was a legitimate support representative.

How McAfee Scams Work: 3 Common Tactics

Most McAfee-related scams follow a familiar pattern: create fear, make the situation appear urgent, and convince you to take an action that benefits the scammer. However, the approach can differ depending on whether you're targeted through email, your browser, or a phone call.

1. Fake McAfee Renewal Emails and SMS Invoices

One of the most recognizable McAfee scams involves a fake subscription invoice delivered by email or text message.

The message might claim that your McAfee Total Protection subscription has expired or automatically renewed for several hundred dollars. It may also include an order number, payment reference, customer ID, and a supposed transaction date to make the invoice appear authentic.

Common messages include:

• Your McAfee subscription has been renewed successfully.
• Your account has been charged for McAfee Total Protection.
• Your protection plan is expiring. Renew immediately to avoid losing security coverage.
• An unexpected payment has been processed. Call customer support to request a refund.

The trap: The email or text contains a suspicious cancellation link or a phone number that supposedly connects you to McAfee billing support.

The real objective: Scammers want you to enter your credit card information on a counterfeit website or call a fraudulent support representative. Once you make contact, they may attempt to collect your banking details, passwords, or payment information.

Be especially careful with invoices that demand immediate action to dispute a charge. The Federal Trade Commission (FTC) has specifically warned about fake subscription renewal messages impersonating well-known companies, including McAfee.

2. Fake McAfee Browser Notifications and Virus Pop-Ups

Another common trick involves fake McAfee security alerts appearing while you browse the internet.

You might suddenly see messages such as:

• Your computer is infected with five viruses!
• McAfee protection has expired. Your device is no longer secure.
• Trojan malware detected. Take action immediately.
• Your personal information is being exposed.
• Click here to activate Total Protection now.

These warnings may display McAfee logos, red warning symbols, countdown timers, or other visual elements designed to make you panic.

The trap: The alerts may come from a website that previously convinced you to click Allow Notifications in your browser. Once permission is granted, that website can send notifications that resemble legitimate antivirus warnings.

Importantly, browser notifications are different from genuine alerts generated by an installed antivirus application. Seeing a McAfee logo in a browser notification does not mean McAfee detected a threat on your computer.

The real objective: Scammers want you to click a malicious link, visit a fake security website, download unwanted software, or contact a fraudulent support number.

3. Fake McAfee Technical Support and Remote Access Scams

Some scammers take the deception further by pretending to be McAfee customer service representatives.

The situation often starts after someone calls a number displayed in a fake email or browser pop-up. The person answering claims to be a technical support specialist and says your computer has a serious infection.

They may then instruct you to:

• Install remote access software such as AnyDesk or TeamViewer.
• Open your banking website to verify your financial information.
• Purchase additional security software or a technical support service.
• Share your passwords, verification codes, or other sensitive information.
• Pay a fee to remove viruses or restore your computer.

A particularly dangerous variation is the fake refund scam. The representative claims that an unauthorized subscription payment has been detected and offers to refund your money.

After gaining remote access, the scammer may display a fake banking transaction, manipulate the victim into entering financial information, or claim that an incorrect refund amount has been transferred.

The FTC warns that tech support scammers use these tactics to steal money and gain access to personal information. A legitimate-looking support conversation is not proof that you're speaking with the real company.

How to Tell a Fake McAfee Alert From a Real One

Not every message mentioning McAfee is fraudulent. The company sends legitimate subscription notifications, product updates, receipts, and account communications.

The important difference is how the message asks you to respond and whether its details match your actual account.

What to Check	Legitimate Communication	Potential Scam Warning
Subscription details	Matches an actual subscription in your account.	References a plan or purchase you cannot verify.
Email sender	Can match an address listed in McAfee's official sender guidance.	Uses an unrelated or deceptive address, or a misleading display name.
Phone numbers	You independently obtain support contact details from the official website.	Demands that you call a number included in an unexpected email or text.
Payment requests	Uses the payment and billing process associated with your genuine subscription.	Demands gift cards, cryptocurrency, or unusual transfers.
Security alerts	Can be verified through your installed security application or account.	Uses a random browser alert to demand an immediate phone call.
Personal information	Does not demand passwords or sensitive verification details through suspicious messages.	Requests your password, PIN, verification code, or banking credentials.

Warning Signs That Deserve Your Attention

Beyond the comparison above, watch for these common red flags:

• You don't use McAfee: An unexpected McAfee renewal invoice deserves extra scrutiny if you have never purchased its products.
• The message creates unnecessary urgency: Threats involving immediate account suspension, permanent data loss, or a limited refund deadline are common pressure tactics.
• The website address looks suspicious: A misspelled domain or an unfamiliar website claiming to provide McAfee support should raise concerns.
• The invoice contains unexplained charges: A payment amount, subscription number, or renewal date that cannot be verified is a reason to investigate.
• The support representative requests remote access: Never allow someone who contacted you unexpectedly to control your computer.

One important detail about sender addresses: Don't assume every legitimate McAfee email must end in @mcafee.com. McAfee publishes multiple authorized sender addresses, including some that use third-party email services. Equally, a convincing sender name or matching-looking address is not sufficient proof that a message is genuine.

For a more reliable check, compare the message with your account and review McAfee's official scam-awareness guidance.

How to Verify a McAfee Renewal Email or Charge

Receiving a suspicious renewal email does not automatically mean your card has been charged. However, you shouldn't ignore an unfamiliar transaction without checking your actual payment history.

McAfee is a legitimate subscription service, and some subscriptions purchased directly from the company can automatically renew.

Does McAfee Automatically Renew Subscriptions?

Yes. According to McAfee's US consumer terms, eligible paid subscriptions purchased directly from McAfee can renew automatically unless the customer opts out or disables auto-renewal.

For subscriptions covered by those terms, McAfee sends an advance renewal notification and may charge the saved payment method within 30 days before the current subscription term ends.

The renewal price can also differ from the introductory price paid when the subscription was first purchased.

This means an actual McAfee renewal charge is possible. The fact that an email mentions automatic renewal does not, by itself, prove that the email is fake.

How to Check Whether a McAfee Charge Is Real

1. Don't click the email's links. Close the suspicious message and open a new browser window.
2. Visit McAfee directly. Type mcafee.com into your browser and navigate to your account from the official website.
3. Open your subscription details. Review the active plans, renewal status, and available billing information.
4. Compare the transaction. Check whether the amount, date, and subscription details match the notification.
5. Review your payment statement. Check your bank or credit card account for an actual posted or pending transaction.

If the subscription exists and the charge matches your account, it may be a legitimate renewal. If you cannot find a matching subscription or payment, don't use the contact number in the suspicious message.

How to Cancel McAfee Auto-Renewal

If you have a genuine McAfee subscription but don't want it to renew automatically, manage the setting through your account instead of using a cancellation link in an email.

1. Visit myaccount.mcafee.com directly.
2. Sign in to your McAfee account.
3. Open the Subscriptions section.
4. Select the subscription you no longer want to renew.
5. Follow the available cancellation instructions and confirm that auto-renewal has been turned off.

McAfee advises customers to disable auto-renewal more than 30 days before the subscription term expires to avoid the next scheduled renewal charge.

Some qualifying subscriptions also have specific benefits associated with auto-renewal, so review the terms before making changes.

If you purchased McAfee through a retailer or another provider, you may need to manage the subscription and billing through that provider instead.

How to Stop Fake McAfee Pop-Ups on Chrome and Edge

If your computer keeps displaying fake McAfee security alerts, you might not have a traditional malware infection. In many cases, an unfamiliar website has permission to send notifications through your browser.

This distinction matters because deleting your antivirus software or immediately purchasing another security subscription may not solve the problem.

How to Remove Fake McAfee Notifications in Google Chrome

Follow these steps on your Windows or Mac computer:

1. Open Google Chrome.
2. Click the three-dot menu in the upper-right corner.
3. Select Settings.
4. Open Privacy and security.
5. Select Site settings.
6. Choose Notifications.
7. Find unfamiliar or suspicious websites under the allowed notifications section.
8. Open the three-dot menu next to the suspicious website and select Block or remove its permission.

Pay particular attention to unfamiliar website addresses that you don't remember allowing to send notifications.

You can also review Site settings > Pop-ups and redirects and block suspicious websites that have permission to open unwanted browser pop-ups.

How to Remove Fake McAfee Notifications in Microsoft Edge

Microsoft Edge has a slightly different settings layout. Here's how to manage unwanted website notifications:

1. Open Microsoft Edge.
2. Click the three-dot menu in the upper-right corner.
3. Select Settings.
4. Open Privacy, search, and services.
5. Select Site permissions, followed by All sites.
6. Find the unfamiliar website responsible for the notifications.
7. Open its permissions and locate Notifications.
8. Change the setting to Block.

You can also manage permissions directly from a website's information icon next to the browser address bar.

What If the McAfee Pop-Ups Keep Coming Back?

If you've blocked suspicious website permissions but the alerts continue, check a few other areas:

• Browser extensions: Remove extensions you don't recognize or no longer use.
• Installed applications: Review recently installed programs for suspicious software.
• Other browsers: Check notification permissions in every browser you use.
• Security software: Update your installed antivirus and run a scan if the activity continues.

Remember that website notifications and conventional pop-up windows are not the same thing. Blocking one type of permission does not necessarily stop the other.

What to Do If You Clicked a McAfee Scam Link

Accidentally clicking a suspicious email link doesn't automatically mean your computer or accounts have been compromised. What matters is what happened after you opened it.

1. If You Only Opened the Suspicious Website

Close the page without interacting with it. Don't download anything, enter personal details, or follow instructions displayed on the website.

If the page repeatedly redirects you or opens unwanted tabs, close the browser and inspect its notification permissions.

2. If You Downloaded a Suspicious File

Don't open or install the downloaded file. Remove it from your Downloads folder and run a security scan.

On Windows 11, you can use the built-in Microsoft Defender protection:

1. Open the Windows Security application.
2. Select Virus & threat protection.
3. Choose Scan options.
4. Select Full scan.
5. Start the scan and follow the recommended actions if threats are detected.

If you strongly suspect persistent malware, Microsoft Defender Offline is another available option on supported Windows systems. It scans the device after restarting, outside the normal Windows environment.

3. If You Entered Your Password or Login Information

Act quickly if you entered your email password, McAfee credentials, or another account's login information on a suspicious website.

• Change the compromised password using a trusted device.
• Change the same password anywhere else you reused it.
• Enable two-factor authentication where available.
• Review active sessions and sign out unfamiliar devices.
• Check recovery email addresses and phone numbers for unauthorized changes.

Pay special attention to your primary email account. Someone who controls your inbox may be able to reset passwords and gain access to other online services.

The same account-security principles apply to shopping accounts and other online services. Our guide on what to do if your Amazon account was hacked explains additional recovery steps and ways to protect your account.

What to Do If You Paid a McAfee Scammer or Gave Remote Access

If you've already transferred money or allowed someone claiming to be McAfee support to control your computer, don't waste time arguing with the person. Focus on protecting your finances and personal information.

1. Disconnect the Compromised Device

If a suspicious person currently has remote access to your computer, immediately disconnect it from the internet by turning off Wi-Fi or unplugging its network cable.

Don't continue following the caller's instructions. Avoid signing in to banking or other sensitive accounts on the compromised device.

2. Contact Your Bank or Credit Card Provider

Call the number printed on the back of your credit or debit card, or use the official banking application to contact your financial institution.

Explain that you may have been targeted by a technical support scam and ask about the appropriate steps.

• Report unauthorized transactions.
• Ask whether your card should be frozen or replaced.
• Request a dispute for unauthorized charges when appropriate.
• Check for unfamiliar transactions or account changes.

If you transferred money through a payment application, wire transfer, or cryptocurrency exchange, contact that provider immediately. Recovery is not guaranteed, but reporting the transaction promptly may improve your options.

3. Change Important Passwords From Another Device

Use a separate, trusted device to change the passwords for your most important accounts.

Prioritize:

• Your primary email account.
• Online banking and payment services.
• Shopping accounts with saved payment information.
• Password managers and cloud storage accounts.
• Other accounts that use the same compromised password.

Enable two-factor authentication and review active sessions so unauthorized users cannot easily regain access.

4. Remove Remote Access Software and Check Your Device

If you installed AnyDesk, TeamViewer, or another remote access application at the scammer's request, don't assume that closing the application is enough.

After disconnecting the device, arrange a proper security check. Remove unauthorized remote access software, inspect installed applications, and run an updated security scan.

If the scammer installed additional software or changed important system settings, consider professional assistance from a technician you independently trust. A more serious compromise may require a clean operating system reinstall.

How to Report a Fake McAfee Email or Scam

Reporting a suspicious message can help the company and relevant authorities identify impersonation attempts and investigate fraudulent activity.

Report the Message to McAfee

McAfee provides an official reporting channel for fraudulent messages that misuse its brand.

• Reporting email: scam@mcafee.com
• Official guidance: McAfee Customer Scam Awareness

You can forward the suspicious email to the reporting address. Avoid opening attachments or clicking any links in the original message.

Report the Scam to the Federal Trade Commission

For readers in the United States, the Federal Trade Commission accepts reports about impersonation, fraudulent technical support, and online scams.

Visit the FTC's guide to spotting, avoiding, and reporting tech support scams for additional guidance.

You can also submit a fraud report through ReportFraud.ftc.gov. Reporting is worthwhile even if you haven't lost money, because reports can help authorities identify patterns and investigate fraudulent activity.

Frequently Asked Questions

Is McAfee itself a scam?

No. McAfee is a legitimate cybersecurity company that provides antivirus software, online security products, and related services.

The problem is that scammers impersonate the company's brand to trick people into sharing financial information, purchasing fraudulent services, or installing malicious software.

A fake McAfee invoice or browser alert should not be confused with the genuine company.

Can a website infect my computer just by showing a McAfee pop-up?

Simply seeing a suspicious pop-up does not automatically mean your computer is infected. Many fake McAfee alerts are website notifications or misleading advertisements rather than actual antivirus warnings.

However, clicking malicious links, downloading suspicious files, granting unnecessary permissions, or interacting with fraudulent support representatives can expose your device and personal information to risk.

Keep your browser and operating system updated, and avoid interacting with unexpected security warnings.

Why does a McAfee scam email contain my real name or old address?

Scammers can obtain personal information from previously exposed databases, public records, data brokers, and other sources.

They may combine names, email addresses, phone numbers, and older contact details to make a phishing message appear more personal.

Seeing your actual name or old address does not necessarily mean your McAfee account or computer has been hacked.

Why do I keep receiving fake McAfee notifications after closing my browser?

Website notification permissions can allow a browser to deliver alerts even when you aren't actively browsing that website.

This is why some fake McAfee notifications continue appearing after you close a browser window. Check the allowed notification permissions in Chrome or Edge and block unfamiliar websites.

If the problem continues, inspect browser extensions and installed applications for suspicious software.

Build Safer Online Habits Before the Next Security Alert Appears

Fake McAfee alerts are a reminder that recognizing a familiar logo is no longer enough to establish whether an online message is trustworthy.

Scammers can copy company branding, create convincing invoices, imitate customer support conversations, and use automated messages to reach thousands of people.

As online threats evolve through 2026 and into 2027, the most useful protection is a habit of independent verification. Don't trust an unexpected invoice simply because it includes your name.

Don't call a support number just because a browser warning makes the situation look urgent. And don't give remote access to someone whose identity you haven't independently verified.

McAfee can be a legitimate security product, but its name alone doesn't make every warning, email, or payment request genuine. Check your account directly, protect your login credentials, and keep your browser and security software updated.

Ultimately, the safest response to an unexpected security warning is not to panic or rush into paying for protection. It's to pause, verify the source, and make sure the next action is actually protecting you.