Norton: unauthorized charge
First check whether the "charge" is real. Fake Norton renewal invoices are common; call no number in the message. A real Norton annual renewal can be refunded within 60 days.
What does this mean?
Grade B (good: mostly official pages; check the flagged values before relying on them). 90% of 39 sources are the organization's own pages or government sites.
Collect
- card or bank statement
- the suspicious email with full headers
- Norton order number if the charge is real
Steps
Do not call any number or click any link in the email, invoice or calendar invite. Check your card or bank statement and sign in to your Norton account directly.
OnlineMy Norton account: My Account > My Subscriptions > Cancel Renewal or Manage Subscriptions Sign-in requiredIf there is no matching charge, the message is a scam. Forward it as an attachment to spam@norton.com and delete it.
If there is a real Norton charge you did not expect, contact Norton and ask for a refund inside the 60-day (annual) or 14-day (first monthly) window.
If you gave a caller remote access, card details or money, contact your bank or card issuer at once, and report it to the FTC.
Facts you can cite
- Policy
The FTC says: "If you get a message about a tech support subscription renewal and you think it's real, contact the company directly" using contact details you know are real, and check your statements for an unauthorized transaction.
Source: consumer.ftc.gov, verified 2026-10-13
Rules in force
- Restore Online Shoppers' Confidence Act (ROSCA) negative option requirements15 U.S.C. 8401-8405
A seller that charges consumers online through a negative option feature (for example an automatic renewal or a free trial that converts to paid) must clearly disclose all material terms before taking billing information, get the consumer's express informed consent before charging, and provide simple mechanisms to stop recurring charges. The FTC enforces ROSCA.
Source: law.cornell.edu, verified 2026-10-12
4 citable points
- Policy
Before obtaining the consumer's billing information, the seller must provide text that "clearly and conspicuously discloses all material terms of the transaction".
Source: law.cornell.edu, verified 2026-10-12
- Policy
The seller must obtain "a consumer's express informed consent before charging the consumer's credit card, debit card, bank account, or other financial account".
Source: law.cornell.edu, verified 2026-10-12
- Policy
A post-transaction third-party seller may not charge a consumer for an online sale unless it discloses the material terms and gets express informed consent, including the consumer's full account number, before charging. An initial merchant may not pass a customer's account number or other billing information to such a seller.
Source: law.cornell.edu, verified 2026-10-12
- Process
A ROSCA violation is treated as a violation of an FTC rule on unfair or deceptive acts or practices, and the FTC enforces ROSCA with its FTC Act powers and penalties. Report violations to the FTC.
Source: law.cornell.edu, verified 2026-10-12
- Policy
If that fails, escalate
Go up one step at a time. Keep the reference numbers and dates from each contact.
Customer service
Written complaint
OnlineMy Norton account: My Account > My Subscriptions > Cancel Renewal or Manage Subscriptions Sign-in requiredCard or bank dispute
Fair Credit Billing Act billing-error and purchase-dispute rights (Regulation Z)
Electronic Fund Transfer Act error resolution and unauthorized-transfer liability (Regulation E)
Card dispute for charges after a cancellation.
Federal regulator
State agency
Your state’s attorney general. Find it in the list of state agencies (also as JSON:
states/<code>.json, for example states/ny.json).
Watch out
- Cancelling renewal online needs sign-in to the Norton account. us.norton.com and Norton's license agreement pages blocked automated fetches on 2026-10-13, so renewal-price terms are not recorded here.
- Norton's contact page shows its phone and chat options only in a browser; no Norton phone number is listed here. Do not use "Norton refund" phone numbers from search results or emails; many are scams.
- Purchases made through an app store, retailer, service provider or other reseller must be cancelled and refunded with that seller.
Let your AI agent handle this
Escalate Anything is a free, open-source MCP server for Claude, Cursor, VS Code, Gemini CLI, Codex and other AI apps. Your agent gets this playbook, keeps a case log with reference numbers and follow-up dates, and drafts each message for you to approve.
1. Set it up (needs uv):
uvx escalate-anything setup2. Ask your agent:
Norton charged me [amount] on [date] and I did not authorize it. Use Escalate Anything to get it reversed.Source code, other install options and the Claude Code plugin