email · Fake invoice / callback scam
Is the “your subscription has renewed” invoice email a scam?
A scam — and the hardest one here, because there is no link to inspect.
Below is the email itself, with every phrase that gives it away marked and numbered. There are 5 signs to find. It is invented for practice — the pattern comes from the public alert linked at the bottom.
Why it is a scam
- A charge for something you don’t ownYou have never heard of this product, and that is exactly why it works. The thought isn’t “did I renew this?”, it’s “how do I stop $689.95?” — and from that second you are doing what the email wants.
- The sender address, againsecureshield-invoices.com. The department and number inside the address are decoration to make it feel institutional.
- A number big enough to make you moveLarge enough to hurt, small enough to be plausible on a card. And “card on file ending 8842” is a pure guess — four digits cost nothing to invent.
- A 48-hour refund windowThe deadline is there to stop you sleeping on it or mentioning it to family tomorrow.
- The phone number is the trapWith no link to hover over, the email feels safer — so the number does the work. Ring it and a courteous “refunds team” answers, then asks to connect to your computer to “process the reversal”. Once they are in, they empty the account. Nothing here is real, including the helpline.
What to do
Don’t ring the number in the email — that is the scam. Check your actual card statement in your banking app instead. No charge, no problem. If there genuinely is a charge, ring your bank on the number on your card.
Pattern drawn from Scamwatch: remote access scams