Report to Norton

• Fake Norton or LifeLock renewal and auto-renewal invoices
• Refund scams that start from one of those invoices
• Phishing emails using the Norton or LifeLock name
• Spam claiming your Norton subscription has expired

1. 1

   Forward it as an attachment, from a webmail client

   Right-click the message and choose "Forward as Attachment", then send it to spam@norton.com. Forwarding normally strips the headers Norton needs. Forwarding as an attachment keeps them.

2. 2

   Or drag the message into a blank email

   Create a blank message addressed to spam@norton.com and drag the suspicious email into it, which attaches it whole. Norton lists this as an equivalent route.

3. 3

   Or paste the headers, if neither works

   Norton documents how to extract the technical headers in Outlook, Gmail, Yahoo and AOL, then paste them into an email to the same address. On a phone, opening the message and forwarding it normally is accepted.

4. 4

   Check the real subscription yourself

   Sign in at norton.com and look at your subscription there. That is the only accurate record of what you are paying, and checking it is exactly what the invoice is counting on you not doing.

• The invoice email itself, as an attachment
• The phone number the invoice tells you to call
• Any payment or remote-access software you were talked into, if you called

Norton states that spam@norton.com does not send updates back, and that submissions get manual or automated review. Treat it as intake rather than a support case. If you called the number and let someone onto your machine or moved money, that is a tech-support scam. The urgent steps there are with your bank, not with Norton.