You've had McAfee antivirus on your laptop for years, because the company has done an excellent job convincing you that your computer will otherwise be infested with digital vermin. So when an email arrives saying your protection is about to expire, you're primed to panic. Better yet, there's an 89% “renewal discount” if you pay today.
“Once the expiration date has passed, your computer becomes susceptible to many different virus threats,” the email warns, in a tone that McAfee itself perfected.
It is, however, a fake email - sent not by the company that has become synonymous with anti-virus software, but by criminals who are hoping to harvest your financial details. Criminals are using a variety of tactics to impersonate McAfee and are getting more sophisticated with advances in artificial intelligence, according to the company.
“McAfee will never ask you to call a phone number in an email or text, and if you receive a subscription or renewal notice, we recommend logging on to McAfee.com directly to confirm your subscription and renewal status as cybercriminals also use false notifications to scam people,” it said in a statement.
The fake emails come in different forms but are often framed with a sense of urgency to encourage the victim to act quickly - a common tactic in fraud, and one that McAfee itself has employed in its legitimate marketing. “Your devices could be at risk. Get antivirus protection now,” says one. “An unprotected computer can be exposed to viruses and other malware. 100% guarantee removed viruses or your money back.”
Alternatively, the email may say you have protection already but that it has or is close to expiration. Another says users can get an 89% discount if they pay on the same day the message was sent. Inconsistent grammar and punctuation are also red flags. The address the email comes from will usually be obscure and unconnected to the company.
If you do click on a link from the email, you will often be brought to a fake site set up to harvest your data. Sometimes there may be links in the fraudulent email to the real McAfee site, but this is only to lend credibility to the scam; there are often malicious links elsewhere, a McAfee spokesperson said. “There may be other links in the email, such as unsubscribe links or others, that can lead to fake websites where people are tricked in entering personal or financial information,” he said.
If you do receive a renewal email, pause and think before acting. You can report fraudulent emails using the McAfee brand to the company and to your email provider using its built-in spam and phishing tools. The company also has a list of valid email addresses that it issues messages from. If you have been scammed, report it to your bank and Report Fraud.