Geek Squad Subscription Renewal Scam: Warning Signs and What to Do

These scams can feel convincing because renewal notices use familiar business language. A large claimed charge can also create pressure to act before checking the details. This is especially true if you have purchased computer support, protection plans, repairs, or subscriptions in the past.

A calm, independent check is safer than reacting to an urgent warning. Even if a message uses a real company name, logo, or address, treat it as unverified until you confirm the claimed charge through a source you trust.

What the scam looks like

A scammer may send an email that resembles a receipt for Geek Squad, Best Buy, or another technology company. The message may claim that a subscription renewed automatically and list a charge large enough to cause alarm.

The message may offer a way to “fix” the charge. It could include a phone number, a button labeled “cancel,” or an attachment described as an invoice or refund request. Unexpected links and attachments can be part of a phishing attempt, so do not click or download them. Read the FTC’s phishing safety advice

The scammer’s goal may be to start a conversation that leads to payment, personal information, or remote control of your computer. The message itself is only the first step. The greater risk often begins when someone calls the number or follows the link.

The fake renewal pattern

Many fake notices follow a similar sequence:

The FTC warns that fake tech-support invoices may lead people to call a number controlled by the scammer. In the FTC-described scheme, the caller may seek remote access, use a spoofed refund process, obtain bank or card details, claim an over-refund occurred, and demand repayment through methods such as gift cards, transfers, cryptocurrency, or payment apps. See the FTC’s explanation of fake invoices and tech-support fraud

Why the message can feel convincing

Scammers can use brand logos, invoice-style layouts, technical wording, and realistic-looking order numbers. They may include a customer number, a charge amount, or a supposed renewal date. None of those details proves the message is genuine.

A familiar brand name can lower your guard. The key question is not whether the email looks polished. Ask whether you expected the renewal and whether you can confirm it without using anything in the message.

A message can also be fraudulent even when it names a company you have used before. Scammers choose recognizable names because recipients may worry that ignoring the notice could lead to a real charge or interrupted service.

What to know before deciding

Do not assume every renewal notice is fraudulent. Some subscriptions do renew automatically. For Best Buy-managed monthly or yearly subscriptions covered by its current terms, Best Buy says the subscription renews automatically until canceled. Those terms do not apply to subscriptions managed and billed directly by a provider. Product identity also matters: Best Buy’s current Geek Squad Protection FAQ says Geek Squad Protection Plans are not renewable, while Best Buy’s statement-charge guidance lists some Geek Squad Protection annual-renewal descriptors. Verify the specific plan and billing path through an independently accessed account or an official Best Buy channel rather than assuming one policy fits every Geek Squad-branded product. Review Best Buy’s current subscription terms Read the Geek Squad Protection FAQ Check Best Buy’s statement-charge guidance

At the same time, a real subscription does not make an unexpected email trustworthy. You may have an active plan and still receive a fake message about it. Treat the email, text, or pop-up as unverified until you confirm the account status through an independent route.

A real charge and a real email are different questions

A genuine charge might appear on your card statement, but a scam email can still falsely claim it relates to a renewal. Conversely, a message can claim a large charge that never happened.

Check your card or bank account for the claimed transaction instead of relying on an invoice image. If no matching transaction appears, the FTC says the renewal message was a scam. If an unauthorized transaction appears, contact the card company or bank through contact details you already trust. Read the FTC’s tech-support scam guidance

Do not click an email link to sign in. For an unexpected message that might be legitimate, the FTC recommends contacting the company or bank through a phone number, email address, or website you know is real. Read the FTC’s phishing safety advice

Do not let urgency make the decision

A notice may claim that your account will close, your computer is at risk, or a refund expires today. The purpose is to shorten your decision time.

A legitimate billing issue can be checked through official channels. A suspicious message does not become urgent just because it says it is. Pause before you call, reply, click, pay, or install anything.

Decision framework

Use this quick framework before responding to any renewal notice:

• •If you do not recognize the subscription, do not call, click, reply, or download anything.
• •If the message contains an unfamiliar callback number, treat it as high risk and find official contact information independently.
• •If it asks for remote access to your computer, stop the interaction until you independently verify the company and reason for support.
• •If a charge appears on your actual card statement and you do not recognize it, contact your card issuer or bank immediately through contact details you already trust; do not wait for merchant support to investigate suspected fraud. Read the FTC’s guidance for scam victims
• •If you shared passwords, payment details, or remote access, move to damage-control steps immediately.
• •If you think you have a Best Buy-managed subscription, go independently to BestBuy.com or use another contact method you already know is legitimate to verify it.

The safest choice in most cases

The safest default is simple: pause and verify. A genuine company can be reached through a known website, a number printed on your card, or another official contact route. A scammer needs you to use the phone number, link, or attachment they supplied.

Do not let fear of a possible charge force you into an unfamiliar process. It is safer to spend a few minutes checking independently than to give a stranger access to your accounts or computer.

When the risk is highest

Consider the message especially risky when it combines an unexpected charge with a demand for fast action. The risk rises further if it asks for gift cards, wire transfers, banking information, login codes, passwords, cryptocurrency, payment apps, or computer access.

The FTC advises people not to click links or download attachments in unexpected messages. It also recommends using independently known contact details to determine whether a message is real. Follow the FTC’s phishing prevention guidance

Signs of a fake Geek Squad renewal notice

No single red flag proves fraud. Several red flags together should tell you to stop and verify independently. The FTC’s guidance describes fake renewal notices, callback numbers, remote-access requests, refund schemes, and unusual payment demands as key elements of tech-support scams. See the FTC’s tech-support scam guidance

Unexpected attachments deserve extra care. The FTC advises against downloading attachments in unexpected messages, even when the subject line appears to concern an invoice, cancellation, refund, or account problem. See the FTC’s phishing guidance

Unexpected links and attachments

An email can use a button that appears to lead to a refund page, account portal, or invoice. It may instead take you to a fake sign-in page or begin an unwanted download.

Do not open unexpected attachments or follow unexpected links. If you believe the message could be legitimate, open a new browser window and navigate independently to a website you already know is real. You can also use a phone number from a trusted statement, card, saved contact, or official company page. Read the FTC’s phishing safety advice

Callback numbers and refund offers

A fake notice may say, “Call now to cancel this charge.” The caller might promise a refund, then ask for remote access or bank information.

The FTC describes this pattern in tech-support scams. Scammers may use a fake subscription notice to get victims to call, then seek access to the computer or money from the victim. A supposed refund can be used as a pretext to collect financial information or demand payment. Learn how tech-support scam calls work

Remote-access requests

Remote-access software can let another person view or control a computer. It has legitimate support uses, but it is dangerous when an unverified caller asks you to use it.

Do not grant access because someone claims a charge is pending. If you need technical help, start the request yourself through a provider you choose and can verify. A legitimate support need does not require you to trust an unexpected caller or email.

How to verify a possible subscription safely

Start from a browser window, saved bookmark, billing statement, official app, or another contact method you already trust. Do not start from the email, text, attachment, or phone number that worried you.

If you think you have a Best Buy-managed subscription, go independently to BestBuy.com or use another contact method you already know is legitimate to verify it. Best Buy’s subscription terms distinguish subscriptions it manages and bills from subscriptions that are managed and billed directly by a provider. Review the current Best Buy subscription terms

Use known-good contact details

For subscriptions covered by Best Buy’s terms, Best Buy lists online cancellation through BestBuy.com, calling 1-888-BEST BUY at 1-888-237-8289, and chatting with an agent on BestBuy.com as ways to cancel automatic renewals. These methods apply to subscriptions purchased from and managed by Best Buy; provider-managed and directly billed subscriptions are outside these billing terms. See the official subscription terms

Use those published channels only after reaching them independently. Do not copy a number from an unexpected notice, even if the message displays a Best Buy or Geek Squad logo.

Check the actual transaction

Look at your card or bank statement rather than trusting an invoice image. Compare the merchant name, date, and amount with the claim in the message.

If no such transaction appears, do not call the number in the email to “cancel” it. If you find a charge you do not recognize, contact your card issuer or bank through the number on the card, an official banking app, or another trusted channel. Read the FTC’s guidance on fake renewal charges

What to do if you receive the email

The first goal is to avoid giving the scam more information. Do not reply to the email, call its number, click its links, or download its files.

If you need details for a report, record the sender address, subject line, callback number, date, and payment request without clicking links. Do not forward the message to other people. Instead, use designated reporting channels where appropriate.

Report the message

Mark the email as spam or junk in your email provider. The FTC says popular providers such as Gmail and Yahoo Mail have strong spam filters enabled by default, and it advises marking unwanted messages that reach your inbox as spam or junk. Read the FTC’s advice on phishing filters and reporting

The FTC also advises forwarding phishing emails to reportphishing@apwg.org, reporting the attempt through the FTC’s fraud-reporting process, and then deleting the message. Follow the reporting instructions on the FTC page rather than relying on links supplied in the suspicious email. See the FTC’s phishing reporting guidance

Keep useful details

Keep a record of the sender address, subject line, phone number, payment request, and date. If you spoke with someone, write down what they claimed and what information you shared.

This information can help you explain the event to your bank, card issuer, email provider, or a person you know and trust who is helping you respond.

What to do if you interacted with a scammer

Act quickly, but do not panic. The right response depends on what the scammer received.

If you clicked but shared nothing

Close the page and do not enter any information. Do not return to the site through the suspicious message.

If you downloaded a file, installed software, or entered information, treat the situation as more serious. Update your security software, run a scan, and delete anything the scan identifies as a problem. Use help from someone you know and trust rather than calling a number from the suspicious email. If you entered a password, change it immediately, change it anywhere else you reused it, and turn on multi-factor authentication where available. Read the FTC’s guidance for scam victims

If you gave remote access

If you gave remote access, stop the session and do not continue speaking with the person who contacted you, even if they say they need more time to complete a refund or fix a problem. Update your security software, run a scan, and delete anything the scan identifies as a problem. Use help from someone you know and trust if you need assistance.

If you gave the scammer a username or password, change that password immediately, change it anywhere else you reused it, and turn on multi-factor authentication where available. See the FTC’s guidance for scam victims

If you shared payment or identity details

If you shared credit- or debit-card information, or made a payment, contact the card issuer, bank, credit union, or payment company immediately through its verified number, official website, or app. Explain that the information or payment was connected to a suspected scam and ask about available protective or reversal steps.

If you shared your Social Security number, use the FTC’s IdentityTheft.gov recovery instructions: if you know the number was used, report it at IdentityTheft.gov; if it was not used or you are unsure, use IdentityTheft.gov/databreach. Review recent transactions carefully. If the scammer obtained account passwords, change them promptly, change any reused passwords, and turn on multi-factor authentication where available. Use different passwords for different important accounts, especially your email account. Read the FTC’s guidance for scam victims

Legitimate subscriptions, cancellation, and refunds

Automatic renewal itself is not proof of a scam. For Best Buy-managed monthly or yearly subscriptions covered by its terms, Best Buy says the subscription renews automatically until canceled. The terms do not cover subscriptions managed and billed directly by the provider. Read Best Buy’s official subscription policy

For Best Buy-managed subscriptions, turning off automatic renewal normally leaves service active through the current subscription period and does not provide a refund. Best Buy may, at its discretion, offer immediate cancellation for particular subscriptions. That option ends access immediately and provides a prorated refund. Separate return-period rules also apply to certain annual subscriptions and limited unactivated monthly subscriptions. Review the current Best Buy subscription terms

Best Buy lists BestBuy.com, 1-888-BEST BUY at 1-888-237-8289, and BestBuy.com chat as official options for canceling automatic renewals for covered subscriptions. See the cancellation methods in the official terms

Avoid a common cancellation trap

A fake email may offer a one-click cancellation link. That link may lead to a fraudulent form or connect you with a scammer posing as support.

Use independently reached Best Buy channels instead. If you are unsure whether a plan is active, confirm it before discussing payment or cancellation. If the subscription is directly managed by another provider, review that provider’s official billing and cancellation information rather than assuming Best Buy’s terms apply.

Prevention habits that reduce risk

A few habits make renewal scams less effective. Keep a simple list of subscriptions, expected renewal periods, and the payment method used for each one.

Review card statements regularly. An organized record helps you distinguish between a routine charge and a fake invoice. It can also make it easier to notice an unfamiliar transaction before a scammer uses it as a reason to contact you.

Protect your email account

Use a unique password for your email account because email access can be used to reset passwords for other services. Turn on multi-factor authentication when your provider offers it.

Use your provider’s spam and phishing controls. The FTC says popular email providers, including Gmail and Yahoo Mail, have strong spam filters enabled by default. It also advises marking messages that reach your inbox as spam or junk. Read the FTC’s phishing guidance

Slow down before seeking computer help

An unexpected warning does not require instant action. If you need computer support, begin the request through a company you choose and can verify.

Never let an unsolicited caller set the terms of a support session. You should know who is connecting to your computer, why they need access, and how you independently confirmed their identity.

Final steps

A fake Geek Squad renewal notice is designed to make you act before you verify. The safest response is to ignore the message’s links and phone numbers, check your records, and use independently verified contact details.

Keep a current list of subscriptions and renewal periods so suspicious notices are easier to spot. If you manage several recurring services, Subpilot subscription management is a first-party page for subscription management and cancellation tracking. Check its current integrations, pricing, and platform support before relying on it for a specific account.