The Geek Squad Renewal Email Scam, Explained

This is one of the longest-running phishing campaigns still active, precisely because it's built around a real, well-known company — Best Buy's Geek Squad — that genuinely does sell tech support subscriptions.

How the email looks

• An invoice-style email claiming a Geek Squad subscription — sometimes for "general support," sometimes for a vague product like "network shield" or "computer protection" — has renewed.
• The charge is usually inflated, commonly in the $300–$500 range, well above what a genuine service would cost.
• A phone number is included, framed as the way to dispute the charge if you didn't authorize it.
• Grammar and formatting are often slightly off compared to genuine Best Buy communications, though increasingly convincing versions circulate too.

The actual attack happens on the phone call

The email itself doesn't steal anything — it's designed to make you call the number to dispute a charge you never made. Once connected, the "representative" either asks for personal and financial information to process a "refund," or asks you to install remote-access software "to process the cancellation," which then gives them direct control of your computer.

If you never had a Geek Squad subscription

Don't call the number in the email. Delete it, and if you're genuinely concerned, verify directly through Best Buy's official website or your own account login — never through anything provided in the suspicious email.

If you've already called the number

• If you provided payment or personal information but didn't install anything, contact your bank or card issuer to flag the account and dispute any charge that goes through.
• If you installed remote-access software, see Tech Support Scam Recovery for the full disconnect-and-secure sequence, starting immediately.

The broader pattern

This scam is one specific version of a much larger category — fake invoices from familiar brands designed to trigger a panicked callback. The same mechanic shows up with other tech, security, and subscription brand names, and the response is the same regardless of which company's name is used: verify independently, never call the number in the email.

For the general version of this pattern, see Bank and Government Imposter Scam Calls, and report the email to the FTC (reportfraud.ftc.gov) regardless of whether you engaged with it. This is one entry in our running field guide to what's actually circulating right now — see Common Scams Right Now (2026): An International Field Guide for the rest.

Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.