Consumers searching for "Webroot scam email," "Webroot email scam," or "Webroot renewal scam" are often trying to verify an unexpected invoice claiming that their antivirus subscription has renewed for hundreds of dollars.
These emails can look convincing. They may use Webroot branding, include an invoice or customer number, name a specific security product, and claim that a payment of $400, $500, $600, or more will be automatically charged unless you call immediately.
Webroot itself is a legitimate cybersecurity company and product brand operated by OpenText. The scam occurs when criminals impersonate Webroot in fake renewal notices, invoices, receipts, or support messages.
A Webroot-branded email claiming you owe hundreds of dollars does not prove that a charge occurred. Do not call the telephone number in an unexpected invoice. Check your actual bank or card account and verify any Webroot subscription through Webroot's official website or My Account.
Is Webroot a Scam?
No. Webroot is a legitimate cybersecurity brand.
Webroot currently sells antivirus, internet-security, identity-protection, and related cybersecurity products and is part of OpenText.
However, criminals frequently impersonate legitimate technology companies because consumers recognize their names. Fake subscription-renewal scams have also impersonated companies such as Geek Squad, Norton, McAfee, and other security or technical-support brands.
The legitimate company may send genuine account and renewal notices to real customers. The scammer copies the Webroot name and branding to make a fake invoice look trustworthy.
Is There a Webroot Renewal Scam Going On?
Yes. Fake Webroot renewal and invoice emails continue to circulate.
Webroot's own online community has previously warned about fake invoices pretending to come from Webroot. In the documented version, the fraudulent invoice claimed a charge of hundreds of dollars and supplied a telephone number for questions or cancellation.
The Federal Trade Commission also warns about this type of tech-support subscription scam. A fake renewal message claims that you have been or soon will be charged hundreds of dollars and tells you to call to cancel.
FTC – How to Spot, Avoid, and Report Tech Support Scams
What Do Current Webroot Scam Emails Say?
Searches reaching ThinkItsAScam.com in 2026 show several current variations.
Fake notices may claim:
- Your Webroot subscription renewed automatically.
- A Webroot membership has been extended for one, two, three, or four years.
- Your saved Visa, Mastercard, bank account, or other payment method will be charged.
- A payment of approximately $400 to more than $600 is scheduled.
- You purchased a Webroot Premium or security-protection package.
- An invoice or billing statement has already been generated.
- You must call customer service immediately to cancel.
- A refund is available only if you contact the billing department before the payment processes.
Current search queries reaching this article have included purported Webroot charges of approximately $454.93, $544.99, and $621.99.
The exact amount, membership length, invoice number, product name, and telephone number can change. The basic strategy remains the same: make you fear an expensive charge so that you contact the scammer.
How the Webroot Scam Email Works
Many of these emails are better described as refund or tech-support scams than traditional password-stealing phishing emails.
The phone number is often the most important part of the scam.
- You receive a fake Webroot invoice, receipt, or renewal notice.
- The message claims a large payment has been or will soon be processed.
- You become worried because you never purchased Webroot or do not remember having a subscription.
- The email tells you to call a customer-service or cancellation number.
- A scammer answers while pretending to work for Webroot billing or support.
- You are told that the supposed charge can be cancelled or refunded.
- The caller may request banking information, card information, security codes, or remote access to your computer.
- The scammer then attempts to steal money, credentials, or personal information.
Why Do They Want You to Call?
A telephone conversation gives the scammer an opportunity to create urgency and guide the victim through additional steps.
The caller may claim:
- Your refund cannot be processed normally.
- You must log into your online bank account.
- You need to install remote-support software.
- A refund was accidentally issued for too much money.
- You must return an "overpayment."
- Your computer has viruses or security problems.
- Your bank account must be verified before the subscription can be cancelled.
The FTC warns that refund scammers may manipulate victims into believing that too much money was refunded and then demand that the supposed excess be returned through gift cards or another payment method.
Does Webroot Really Have Automatic Renewal?
Yes. This is one reason the scam can sound believable.
Webroot offers legitimate automatic subscription renewal. Its current customer guidance states that it sends renewal notices before charging customers who have automatic renewal enabled.
Webroot also provides official pages for managing auto-renewal, accessing an account, and requesting eligible refunds.
If you really purchased Webroot and enabled automatic renewal, a genuine renewal is possible. Verify it by signing into your Webroot account independently and checking your actual financial statement — not by calling the telephone number contained in an unexpected email.
How Can I Tell If a Webroot Renewal Email Is Real?
Do not rely on the logo, display name, invoice number, professional formatting, or sender name alone.
Instead:
- Do not call the number in the email.
- Do not click the email's account or cancellation links.
- Open a new browser window and go directly to Webroot.com.
- Sign into your actual Webroot account if you have one.
- Check your credit card or bank statement for the claimed transaction.
- Use Webroot's official support page if you still need assistance.
I Never Signed Up for Webroot — Why Did I Get the Email?
Receiving a fake Webroot invoice does not mean that you actually have a Webroot account.
Scammers can send large numbers of emails to addresses obtained from marketing databases, data breaches, public sources, compromised mailing lists, or other sources.
They do not need to know whether you use Webroot.
In fact, telling thousands of people that they were charged hundreds of dollars works partly because some recipients will be so confused by a product they never purchased that they immediately call the cancellation number.
What If the Email Says I Have a Three- or Four-Year Webroot Membership?
Current searches reaching this page include consumers receiving messages about unexpected multi-year Webroot memberships, including three- and four-year subscriptions.
Do not assume that a detailed membership term makes the email authentic.
A scammer can generate:
- A fake customer ID
- A fake invoice number
- A fake renewal date
- A fake product name
- A fake subscription period
- A fake payment total
- A fake support telephone number
Verify whether any subscription actually exists through Webroot's official account system.
What If There Really Is a Webroot Charge on My Card?
A real charge requires a different response from an email that merely claims you were charged.
If an actual Webroot-related transaction appears on your bank or card statement:
- Check whether you previously purchased Webroot.
- Ask whether another authorized household member purchased or renewed the software.
- Review your Webroot account and receipts.
- Verify whether automatic renewal was enabled.
- Contact Webroot through its official support or refund pages.
- If you cannot identify or authorize the transaction, contact the financial institution that issued your card.
Webroot's current consumer refund page states that eligible consumer products are covered by a 70-day money-back guarantee, subject to its applicable terms.
If you need help researching a genuinely unfamiliar transaction, see Unrecognized Credit Card or Bank Charge: What to Do on ChargeOnMyCard.com.
Webroot Invoice Scam Warning Signs
You Never Purchased Webroot
An unexpected invoice for a security product you never bought is a major warning sign.
The Claimed Charge Is Hundreds of Dollars
Large amounts are often used to generate an emotional response and make the recipient act before verifying the transaction.
The Email Tells You to Call Immediately
A fake invoice often creates an artificial cancellation deadline or says the charge will become permanent unless you call within a few hours.
The Phone Number Is the Main Call to Action
A professionally formatted invoice may exist mainly to persuade you to call a fraudulent support center.
You Are Asked to Install Remote-Access Software
Do not install remote-control or screen-sharing software because an unsolicited billing caller says it is necessary to issue a refund.
You Are Told to Log Into Online Banking
A supposed support representative should not need to watch or control your computer while you access your bank account.
You Are Asked to Pay Back an Accidental Refund
This is a known refund-scam tactic. The scammer may create the appearance that too much money was returned and then demand repayment.
Should I Call the Phone Number in the Webroot Email?
No, not if the message is unexpected or suspicious.
Even if the telephone number looks local or the caller ID later displays a recognizable company name, obtain Webroot's current support information independently through Webroot.com.
Do not use the email itself as your source for verification.
How to Report a Webroot Scam Email
Search data shows that many consumers are specifically trying to find where to report Webroot renewal and phishing emails.
If you receive a suspicious Webroot-branded message:
- Use your email provider's Report phishing or Report spam function.
- Report fraud attempts to the Federal Trade Commission at ReportFraud.ftc.gov.
- If you are uncertain whether a message is connected to a genuine account, contact Webroot through its official support page.
- Preserve the email if you lost money, gave someone remote access, or need it as evidence for your bank or law enforcement.
Do not reply to the scammer merely to tell them that you know the email is fraudulent.
What If I Already Called the Fake Webroot Number?
If you called but did not provide information, install software, or send money, end communication and block the number.
If you provided information or allowed remote access, take additional action immediately.
- Disconnect the scammer's remote session.
- Remove unfamiliar remote-access software.
- Update your security software and run a trusted security scan.
- Change passwords that may have been visible or disclosed.
- Enable multi-factor authentication where available.
- Contact your bank or card issuer if financial information was exposed.
- Review recent transactions.
- Report the incident to the FTC.
What If the Scammer Accessed My Bank Account?
Contact your financial institution immediately using the number printed on your card or shown in your bank's official app or website.
Tell the institution that a suspected tech-support or refund scammer may have viewed or accessed your account.
If the scammer instructed you to transfer money, buy gift cards, send cryptocurrency, or use a payment app, contact that payment provider immediately and ask whether the transaction can be stopped or reversed.
Frequently Asked Questions
Is Webroot a scam?
No. Webroot is a legitimate cybersecurity brand operated by OpenText. However, scammers impersonate Webroot in fake renewal emails, invoices, receipts, and tech-support scams.
Are there Webroot scam emails being sent?
Yes. Fake Webroot-branded invoice and subscription-renewal emails have circulated for years and continue to generate consumer searches in 2026. The messages often claim that hundreds of dollars will be charged and direct recipients to call a supposed support number.
Is there a Webroot renewal scam going on?
Yes. An unexpected Webroot renewal email that claims a large charge and tells you to call an unfamiliar telephone number should be treated as suspicious. Verify any real subscription independently through Webroot's official website.
What is the Webroot email scam?
The Webroot email scam usually impersonates the legitimate antivirus company and sends a fake invoice or renewal notice. The goal is often to make the recipient call a fraudulent support number, where the scammer attempts to obtain money, financial information, or remote access to the victim's computer.
Does Webroot send legitimate renewal emails?
Yes. Webroot offers genuine automatic subscription renewal and says it notifies customers before charging them. A genuine customer should verify the renewal through their Webroot account rather than relying solely on an email.
Why did I receive a Webroot invoice if I never signed up?
Scammers often send fake invoices in bulk without knowing whether the recipient actually uses Webroot. Receiving the email does not prove that an account or transaction exists.
What if the email says Webroot charged me $500 or $600?
Check your actual card or bank account. If no matching charge appears, the amount in the email may simply be bait designed to make you call. If a real transaction appears, contact Webroot and your financial institution through independently verified channels.
Where do I report a Webroot scam email?
Use your email provider's phishing-report feature and report the scam through ReportFraud.ftc.gov. If you need to determine whether an actual Webroot account or charge exists, use Webroot's official support page.
Official Webroot and Consumer Resources
- Webroot Official Support
- Webroot Auto-Renewal Management
- Webroot Official Refund Page
- FTC Tech Support Scam Guidance
- Report Fraud to the FTC
Related ThinkItsAScam.com Warnings
- Geek Squad Subscription Scam: Fake Renewal & Invoice Warning
- Microsoft Security Alert Scam: Pop-Up, Email & Phone Warning
Have You Received a Webroot Scam Email?
Share the non-sensitive details of your experience below to help other consumers recognize current versions of the scam.
- What amount did the email claim you owed?
- Did it describe a one-year or multi-year Webroot membership?
- Did the message include a telephone number?
- Did you actually have a Webroot subscription?
- Was there a matching transaction on your bank or credit-card statement?
- Did the caller request remote access to your computer?
- Did they ask you to log into online banking?
- Were you asked to send money or return an alleged overpayment?
Please do not post your complete telephone number, email address, account number, Webroot keycode, invoice number, bank information, payment-card details, passwords, security codes, or other sensitive personal information in the comments.
Page reviewed and updated: August 17, 2026.
Disclaimer
ThinkItsAScam.com is an independent consumer information website and is not affiliated with Webroot, OpenText, Best Buy, Geek Squad, the Federal Trade Commission, any bank, card issuer, or other organization mentioned in this article. Webroot is a legitimate cybersecurity brand. This article concerns fraudulent emails, invoices, renewal notices, support calls, and refund scams that may misuse Webroot's name or branding. Genuine subscriptions, billing arrangements, renewal terms, refund policies, products, and support information can change. Verify account-specific information directly through official Webroot channels. This article is provided for general consumer information and is not financial, legal, or cybersecurity advice.
```