The phony invoice scam is a common scam popular with scammers because it is quite effective.  It starts when you receive an email that purports to be from a popular company with which many of us do business that indicates that you owe them a significant payment.   The scammers count on people being concerned that they are being wrongfully charged for a product they did not order.  You are provided a telephone number to call if you dispute the bill. If you call the number, you will be prompted to provide personal information that will be used to make you a victim of identity theft.

This email appears to come from Norton, a company that provides a wide range of digital security services.   As always, the purpose of a phishing email is to lure you into clicking on links contained within the email or providing personal information, in this case by phone if you call to dispute the phony bill . If you click on links in phishing emails, you end up downloading malware and if you provide the requested information, it ends up being used to make you a victim of identity theft. This particular phishing email provides a phone number to call if you wish to dispute the obviously phony invoice.  If you call the number in the phishing email you will be asked for personal information that will be used to make you a victim of identity theft.

There are a number of red flags that indicate that this is a scam.  Your name does not appear anywhere in the invoice.  Only your email address appears in the phony invoice.  Also, the email was sent from an email address that appears to have nothing to do with Norton.

Here is a copy of the invoice being circulated.

We Are Renewing It For You

Dear Customer,

Your Personal Subscription With NORTON Will Expire Today. The Subscription Will Be Auto Renewed. Hope You Are Happy With The Services.

Customer Support – +1 (866) 726-0114 

Order ID – #786-553-5082332  

PRODUCT DESCRIPTION

Account Type:- Personal Home Subscription

Product         :- NORTON Premium

Quantity        :- 1

Tenure          :- 3 Years

Payment Mode:- Auto Debit

Renewal Amount – 249.99

This charge appears on your statement as payment to “NORTON LIFELOCK INC”

Terms & Conditions
The subscription period will automatically renew unless you turn it of no later than 24 hrs before the end of current period. To cancel auto-renewal or to manage your subscription.

if you didn’t authorize this Charge, You have 74 Hrs From The Date Of Transaction to open a dispute against this charge or claim for the refund.
We Recommend you to call our customer care service immediately, Please Keep The Order Number Or Transaction ID handy for assistance.

Thank You

Team NORTON

Customer Support:- +1 (866) 726-0114

TIPS

Once, I received a large invoice from a company with which I do business for goods I did not order, but rather than click on the link provided in the email, I went directly to the company’s website to question the invoice.  When the website came up, the first thing I saw was a large announcement that the invoice was a scam and that many people had received these phony invoices.  If you ever receive a phony invoice such as this and you think that it may possibly be true, don’t click on links or call phone numbers provided in the email.  Rather, contact the real company directly at a phone number or website that you know is legitimate where you can confirm that the phishing invoice was a scam.

Never click on links or download attachments in emails or text messages unless you have absolutely confirmed that they are legitimate and don’t call companies at telephone numbers that appear in the email such as this one.  Instead, if the email appears to come from a legitimate company, you can call them at a telephone number you confirm is legitimate .  Don’t call the number that appears in the email.  In the case of Norton, the real telephone number to call for customer service is 844-993-1307.  One of the indications that this is not legitimate and is a phishing email is the fact that the email address from which it was sent has nothing to do with Norton.   Most likely it is the email address of someone whose email account was hacked and made a part of a botnet used to send out thee phishing emails.   Also, nowhere in the email does your name appear.  The email does contain good graphics and the Norton logo, but these are extremely easy to copy.  More telling are the grammatical errors that appear throughout the phishing email which are often a result of the scam originating in a country where English is not the primary language.

For those of you receiving the Scam of the day through an email, I just want to remind you that if you want to see the ever increasing list of Coronavirus scams go to the first page of the http://www.scamicide.com website and click on the tab at the top of the page that indicates “Coronavirus Scams.”  Scamicide has been cited by the New York Times as one of three top sources for information about Coronavirus related scams.

If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day/