An antivirus renewal scam uses an unexpected subscription notice to push you into paying, calling a number or sharing information. Don’t use the links or contact details in a message you weren’t expecting: check your subscription through the company’s official app or website, reached independently.
How an antivirus renewal scam works
A notice may claim that antivirus protection is about to renew, has already renewed or needs attention. It might use a familiar-looking company name or a professional design to seem routine. The goal may be to get you to pay, disclose personal or payment details, or call a number supplied in the notice.
Some notices create urgency by warning that your device is unprotected or that a charge must be disputed right away. Others may present a supposed customer-service or refund option. A request to install remote-access software or let someone control your computer is especially risky: it can give another person access to your device and anything visible or stored on it.
Not every renewal reminder is fake. You may have a real subscription set to renew, or a payment may be handled through an app store or another service. The safest check is to look up the subscription and billing details independently rather than relying on the unexpected message.
Ways a fake antivirus notice may reach you
An antivirus renewal scam can arrive in an email, text message, browser pop-up or phone call. A message might include a link to a payment page, while a pop-up may tell you to call for help. A caller may say they can cancel a renewal or issue a refund if you follow their instructions.
A notice can also be confusing because a real purchase may have been made through a different billing channel. For example, you might need to check the account where you originally bought the software, or the app-store account used for the subscription. Don’t assume a notice is genuine just because it uses a company name you recognize.
These examples describe possible approaches, not proof that a particular company sent a message. If you are unsure whether a renewal is real, leave the message and contact the provider using details you find independently.
Red flags in an antivirus renewal scam
- You don’t recognize the subscription, account or renewal described in the notice.
- The message demands immediate action or suggests your device will be at risk unless you respond quickly.
- It asks you to call a number, click a payment link or open an attachment to cancel or dispute a charge.
- A pop-up prevents you from using your browser normally or tells you to contact “support” through its own instructions.
- Someone asks for your password, one-time security code, full payment-card details or banking login.
- A supposed support person asks you to install software that lets them access or control your device.
- You are asked to pay using an unusual method, or to send money to receive a refund.
- The sender’s address, spelling, web address or account details don’t match information you can verify independently.
A single warning sign does not prove a message is fraudulent, and a polished design does not prove it is genuine. Treat an unexpected request as unverified until you check it through a separate, trusted route.
How to check a renewal safely
Start by closing the message or pop-up without clicking its links or calling its number. Open the antivirus app already installed on your device, or type the provider’s known website address yourself. If you can’t confirm the address, use a trusted bookmark or find the provider’s official contact page through a reliable source.
Check the subscription status and billing history in the account you used to purchase the software. If you bought it through an app store or another service, check that account too. Compare the notice with your own records, but don’t treat a logo, a familiar name or a detailed-looking invoice as verification.
If you need help, contact the provider using contact information from its official website or app—not the details in the notice. Ask whether there is a real subscription or charge. You can also consult the Canadian Centre for Cyber Security for general online safety guidance.
Keep your operating system, browser and security software updated through their built-in update tools or official sources. Use unique passwords for important accounts, and don’t share verification codes with someone who contacts you unexpectedly. These habits can reduce risk even when a misleading notice reaches you.
What to do if you responded to a notice
If you think you may have interacted with an antivirus renewal scam, act based on what you shared or did. Don’t continue the conversation, and don’t pay an additional fee to “fix” the situation or recover money.
- If you paid or shared banking details, contact your bank or payment provider promptly. Explain what happened and ask what steps they recommend to protect the account or payment method.
- If you shared a password, change it. Use the official website or app, and change it anywhere else you reused it. Turn on extra account security where available.
- If you shared a security code, contact the affected service. Use independently verified contact details and check the account for unfamiliar activity.
- If you installed software or allowed remote access, disconnect the device from the internet. Use a separate, trusted device to contact a reputable technician or the software provider for help checking and securing it.
- Save relevant records. Keep the message, sender details, payment records and a note of what happened. Don’t forward suspicious links or attachments to others.
- Check related accounts. Look for unfamiliar transactions, changes to account settings or unexpected subscription activity, and contact the relevant provider if something concerns you.
Take these steps even if you are uncertain whether the notice was genuine. A quick conversation with your bank or the service involved can help you decide what to do next.
How to report an antivirus renewal scam in Canada
Report suspected fraud to the Canadian Anti-Fraud Centre online at antifraudcentre-centreantifraude.ca or by phone at 1-888-495-8501. You can also contact your local police service. If money was taken or you shared banking or payment details, contact your bank or payment provider as well.
Include the information you have, such as how the notice reached you, what it asked you to do and whether you shared information or money. Reporting can help the appropriate organizations understand what happened and advise you on next steps.
Frequently asked questions
How can I tell if an antivirus renewal notice is real?
Check the subscription and billing history in the account or app you normally use. Contact the provider using details you find independently. Don’t rely on the message’s phone number, link or claim that it is official.
Should I call the number in a renewal pop-up?
No. Don’t use a number supplied by an unexpected pop-up. Close it if you can, then contact the software provider through its official app or website.
What if the notice shows a charge I don’t recognize?
Check your account and payment records through the relevant official service. If you see an unfamiliar transaction or already shared payment details, contact your bank or payment provider promptly.
Can I report a notice even if I did not lose money?
Yes. You can report suspected fraud to the Canadian Anti-Fraud Centre even if you did not pay or share information. Contact local police too if you believe a crime has affected you.
Reviewed by our editorial team on .
The Scam Alert Team tracks fraud targeting Canadians and turns official warnings into clear, practical advice. Our team has a background in IT and cybersecurity, and every article is fact-checked against official sources before publication. How we verify alerts