Skip to content
Spyware News
  • Active
  • Severity: Medium
  • Adware
  • Windows, Mac
  • Verified · Aug 2022

How to remove Norton LifeLock email scam

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Linas Kiguolis · Expert in social media

Norton LifeLock email scam is the campaign delivering messages with false claims not related to the listed companies

Norton LifeLock email scam messages were discovered when user complaints were found online. Researchers found that it was fake and not affiliated with either NortonLifeLock Inc. or PayPal Holdings, Inc. This fraudulent email was presented as an invoice for a successful purchase, stating that the payment had already been processed.

The goal is to trick the recipients into believing that they need to call the number provided in order to cancel the fraudulent payment/subscription. The fraudsters' ultimate goal is probably to gain remote access to the victims' devices so they can steal sensitive information like banking details.[1]

The fake email used in this scam delivers the message:

INVOICE
PalPay Inc.
Unite states

PayPal Inc.
42 E 20th st, #205
New York, NY 10003, USA
Toll Free – 1 (856) 291-0622

Invoice Number: #PL9788/1108059
Invoice Date: August 27, 2022
Payment Due: August 27, 2022

Amount Due (USD): $349.85

Items Norton LifeLock Family Security For 10 Devices
Quantity 01
Price $349.85
Amount $449.99
Total $449.99
Amount Due (USD): $449.99

Notes and Terms & Condition

Dear
Payment sent for Norton LifeLock Family Security Services, has been successfully approved. The charge of purchase will appear in your account in next 12-48 hours. TO stop or unsubscribe (Cancel ) call now to PayPal Payment Service Support at 1 (856) 291-0622. If you did not Authorize this charge or would like to cancel the subscription call now at 1 (856) 291-0622

Subtleties of your Recent Invoice:
Item: Geek Anti Drive
Receipt ID: MMTS/78467836/973534
Instalment Made By: Online Credit Card
Method of shipment: Not Updated Yet Kindly call us for more Info On 1 (856) 291-0622

Your Services Request has been successfully Processed, & the Amount has been been Charged.
Administrations has been Updated Now.

Any issues with Order Please reach out us Now On: 1 (856) 291-0622

The danger behind an email scam campaign

If you have received this email, do not call the number provided. Instead, report it to the proper authorities and delete it from your inbox. Remember always to be vigilant when checking your emails, as scammers are constantly coming up with new ways to trick unsuspecting people.

Name Norton LifeLock scam
Type Email scam, fraud, scam
Category Potentially unwanted program
Issues The message claims that people need to pay or contact technicians
Support scam number 1 (856) 291-0622
Distribution Rogue sites, deceptive emails, online content, other threat platforms, malware
Removal Threats can be removed using anti-malware tools
Repair Run FortectIntego to ensure that virus leftovers do not affect the system further

This spam email masquerades as an invoice from Norton LifeLock, informing the recipient that they have successfully subscribed to the service and payment has been processed. The email includes a telephone number to cancel the subscription, but it is fake, and no amount of money will be charged if the recipient responds.

It is unclear what scam model this spam campaign follows or what malware might be spread as a consequence, so the sooner you clear any threats, the better. It is most likely a combination of a refund and a tech support scam.[2] However, these scam messages are often caused by the adware-type infection that is turning on the machine already.

Once access is established, in refund scams – victims are asked to log into their online bank accounts. Cybercriminals can manipulate what is seen by editing website HTML. Hence, the bank account's page is edited while scammers use the remote access software features to darken the users' screens. Avoid these infections and misleading messages, as experts[3] recommend.

Removing the malware

Scammers can achieve their financial gain goals by moving money within the accounts and accessing users' devices, pretending to be experts, technicians, and support. Then manipulating websites and bank account pages or even collecting credentials while you do as Norton LifeLock email scammers say can occur.

Try to remove the potentially unwanted programs that potentially led to these messages and additional issues or remove the threat that can be already placed on the machine to control various processes of the computer. That is possible with proper anti-malware tools because AV detection engines can show all threats that are active on the system, including anything related to the Norton LifeLock email scam.

Run the application that is powerful and can be considered an anti-malware application and find any threats on the system that can affect the performance of the device. Threats can be found with SpyHunterCombo Cleaner or MalwarebytesMalwarebytes when the full system scan gets initiated on the machine. Remove any detected threats properly.

Avoiding scams, in general, can be crucial

Norton LifeLock email scam is one of the many campaigns created and controlled by cybercriminals or hackers who care about their own goals and go scamming people. Cybercriminals will often use deceptive emails in order to trick an Internet user into giving away sensitive private information. This can include login information for online services, email accounts, or online banking information.

After clicking on the link in the email, victims are redirected to a fake website that looks identical or very similar to the original one. These can be phishing email campaigns, for example. Victims are then asked to enter their password, credit card details, or other sensitive information that is then stolen by cybercriminals and used in other scam campaigns.

This type of scam is becoming increasingly common, as cybercriminals are constantly finding new ways to make their fake websites and emails look more realistic. If you receive an email from a company or website that you're not expecting, be sure to check the URL carefully before clicking on any links.

And if you're ever asked to enter sensitive information into a website, make sure you're certain that it's a legitimate site before proceeding. Avoid any interactions with the content when these messages like Norton LifeLock email scam appear on the screen and in your email box.

Uninstall from Windows

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows

Delete from macOS

Remove the unwanted application:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).Uninstall from Mac

Delete leftover files and folders:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
  3. Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.Delete leftover files from Mac
  4. Finally, empty the Trash to permanently remove the leftovers.

Remove from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the extension and click on the Gear icon.
  3. Click Remove.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Restore new tab and homepage settings:

  1. Click the menu icon and choose Settings.
  2. Then find On startup section.
  3. Click Remove next to any suspicious startup page.

Reset MS Edge if the above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy, search and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.
  5. This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.Reset Chromium Edge

Remove from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select the unwanted extension and click Remove.Remove extensions from Firefox

Reset the homepage:

  1. Click three horizontal lines at the top right corner to open the menu.
  2. Choose Settings.
  3. Under Home, set your preferred homepage and new tab settings.

Clear cookies and site data:

  1. Click Menu and pick Settings.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data...
  5. Select Cookies and Site Data and Temporary cached files and pages, then click Clear.Clear cookies and site data from Firefox

Reset Mozilla Firefox

If clearing the browser as explained above did not help, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox...
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.Reset Firefox 2

Remove from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Delete from Safari

Remove dangerous extensions:

  1. Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
  2. Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.Remove extensions from Safari

Clear history and website data:

  1. Click Safari in the menu and pick Clear History.
  2. Set Clear to all history and confirm with Clear History.Clear history from Safari

Reset Safari:

  1. Click Safari in the menu and select Preferences > Advanced.
  2. Enable Show Develop menu in menu bar.
  3. From the menu bar, click Develop and select Empty Caches.Reset Safari

Did this guide help?

Yes0No0

Be the first to comment

Log in to post your comment
Log in to comment
Editor's pick · tested 2026

Fortect Intego

9.4 / 10 9.6 / 10 Best overall pick
  • Real-time ransomware shield
  • Free 14-day trial, no card
  • Cleans the threats listed above

Ad — we may earn a commission if you buy via this link.

Get protected →Get protected → Read our full review Read our full review
Spyware News
Powered by  GDPR Cookie Compliance
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.