McAfee Total Protection has expired e-mail scam: how to spot it and what to do
They use the name of a well-known security brand to appear legitimate. Social engineering techniques are used to trick people into thinking that their system is in danger.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Do it yourself · free Remove McAfee Total Protection has expired e-mail scam yourself 4 steps, about 12 minutes, no software needed.
Start the steps
McAfee Total Protection has expired e-mail scam: summary
| Distribution | Compromised websites, deceptive ads, software bundling |
|---|---|
| TYPE | Phishing scam; adware |
| SYMPTOMS | A page appears seemingly out of nowhere pushing users to install antivirus software |
| DANGERS | Installation of PUPs or malware, sensitive information disclosure, monetary losses |
| Name | McAfee Total Protection has expired |
| Type | Phishing message |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 8 more facts
| Symptoms | A phishing e-mail asking you to sign in |
|---|---|
| Evidence | 6 write-ups by security sites; details still limited |
| Arrives as | |
| Pretends to be | A well-known company |
| Claim | Your account needs urgent attention |
| Asks for | Your password |
| First seen | 14 April 2022 |
| Facts checked | 6 October 2026 |
What the McAfee Total Protection has expired e-mail scam e-mail looks like
Text of a phishing e-mail asking you to sign in, as people saw it
Windows Security Center: Your McAfee subscription has expired today. Renew now to protect your computer from the latest Ransomware viruses.
Your McAfee subscription has expired on 8 July 2018
Do not leave your PC unprotected against the latest threats. Renew your subscription now to stay protected.
What Should I Do?
Step 1: Click the button below to download the latest version of McAfee 2018
Step 2: Run McAfee Antivirus to scan and remove all potential threats
From our report of Apr 2022 · not reviewed since
Distribution methods
We previously wrote about many similar sites, like Datasecuritycentr.com, Systemsecuritys.com, and Totaldatasecuritycentr.com.
They can rarely be found through search results. Most of them hide in other shady pages. Sites that engage in illegal activities are especially dangerous as they are unregulated and filled with deceptive ads and sneaky redirects.
Even though Google promised to get rid of them, they still exist. Nowadays, there are plenty of streaming services to choose from, like Netflix, or Hulu. Users only need to pay a small subscription fee to be able to watch as much content as they want safely.
You should also beware of freeware distribution, peer-to-peer file-sharing platforms, and torrent sites. They are breeding grounds for all kinds of malware and rogue advertising networks operate there actively so you can be easily redirected to a push notification spam page, or another scam site created to monetize user activity.
To minimize the risk of adware infection, be focused during software installation. Always choose the "Custom" or "Advanced" installation method. Read the Privacy Policy and Terms of Use to find out what the program will be able to do and what data it will collect.
The last and most important part is to check the file list. Untick the boxes next to any additional programs that you did not choose to install.
How to tell the McAfee Total Protection has expired e-mail scam e-mail is fake
From our report of Apr 2022 · not reviewed since
- "McAfee Total Protection has expired" is a fake message delivered by scammers.
- There are many variations of this scam and thousands of websites that are disguised as a security alert from McAfee.
- Check your system for adware – you can either do it manually or perform a full system scan with antivirus for a quicker solution
- You might be seeing the "McAfee Total Protection has expired" scam page because you have a malicious extension added to your browser, causing pop-ups, banners, redirects, and an overall increase of commercial content in your device.
Is McAfee Total Protection has expired e-mail scam dangerous? What the senders want
From our report of Apr 2022 · not reviewed since
McAfee Total Protection has expired scam is used to lure out personal information
They use the name of a well-known security brand to appear legitimate.
Social engineering techniques are used to trick people into thinking that their system is in danger. You may encounter messages such as:
These scams can cause PUP (potentially unwanted program), and malware installations. Crooks also ask users to fill out their personal details, like their name, address, email, phone number, bank card details, etc. This can result in privacy issues, monetary losses, or even identity theft.
What to do after the McAfee Total Protection has expired e-mail
If you only received the message and clicked nothing, step 3 is all you need.
If you clicked the link or typed anything on the page it opened, do every step, starting with the password.
Step 1: Change the password you typed on the fake page
If you typed a password on the page the McAfee Total Protection has expired message opened, assume the sender has it. Go to the real site by typing its address yourself and change the password there, choosing one you have never used.
Change it anywhere else the same password was used, and sign out all other sessions if the service offers it. Any browser on Windows 11 or Windows 10 will do, as long as you do not follow the e-mail's link.
Microsoft account, Security page (account.microsoft.com/security): Change password. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 2: Turn on two-step verification
With two-step verification on, a stolen password alone no longer opens the account, because a sign-in from a new device also needs a code from your phone.
Switch it on for the e-mail account first, then for banking, shopping and social accounts that use that address.
Check the recovery phone, the recovery e-mail and any forwarding rules while you are in the settings, since attackers change them to come back. The pages are the same on Windows 11 and Windows 10.
Microsoft account: Manage how I sign in, where two-step verification and the sign-in methods are. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 3: Report the e-mail and delete it
Do not reply and do not click anything else in the message. In Outlook select the e-mail and choose Report > Report phishing; in Gmail open the three-dot menu next to Reply and pick Report phishing.
That trains the filter for everyone on the service, and the message goes to the junk folder. If the e-mail came to a work address, forward it to your IT team as an attachment first.
The steps are the same in the web mail and the mail apps on Windows 11 and Windows 10.
New Outlook for Windows and Outlook on the web: Report > Report phishing. Full procedure with screenshots: Report a phishing e-mail
Step 4: Scan the PC if you opened a file from the message
A fake sign-in page only steals what you type, so most readers can skip this step. If the McAfee Total Protection has expired e-mail made you download or open a file, delete it and scan the PC.
In Windows Security > Virus & threat protection > Scan options, run a Full scan and then Microsoft Defender Antivirus (offline scan) > Scan now. The offline scan restarts Windows 11 or Windows 10 and takes about 15 minutes.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Protect your privacy - employ a VPN
There are several ways how to make your online time more private - you can access an incognito tab.
However, there is no secret that even in this mode, you are tracked for advertising purposes. There is a way to add an extra layer of protection and create a completely anonymous web browsing practice with the help of VPN. This software reroutes traffic through different servers, thus leaving your IP address and geolocation in disguise.
Besides, it is based on a strict no-log policy, meaning that no data will be recorded, leaked, and available for both first and third parties. The combination of a secure web browser and VPN will let you browse the Internet without a feeling of being spied or targeted by criminals.
No backups? No problem. Use a data recovery tool
If you wonder how data loss can occur, you should not look any further for answers - human errors, malware attacks, hardware failures, power cuts, natural disasters, or even simple negligence.
In some cases, lost files are extremely important, and many straight out panic when such an unfortunate course of events happen. Due to this, you should always ensure that you prepare proper data backups on a regular basis.
If you were caught by surprise and did not have any backups to restore your files from, not everything is lost. is one of the leading file recovery solutions you can find on the market - it is likely to restore even lost emails or data located on an external device.
From our report of Apr 2022 · not reviewed since
Start the removal process
1.
Look for suspicious browser extensions
Even if you do not notice these symptoms we suggest investigating your browser.
The first thing you should do is go to your browser settings and check if you see any suspicious add-ons in the list. The best way to do this is by removing the extensions one by one and seeing if you notice any difference. You can follow our guide if you need help:
MS Edge (Chromium)
2. Clear your browsers
Many websites use these tracking technologies to see the links you click on, things you purchase online, and other data like your IP address, geolocation, pages you visit, links you click on, and things you purchase online. Generally, this is not a bad thing as it helps websites and program developers to personalize the user experience.
But we see that more often, cookies are used to generate revenue. They can be sold to advertising networks or other third parties and used to target you with ads even more. There have also been cases when cookies were hijacked and used for malicious purposes.
Security experts recommend clearing them regularly. It stops the tracking and deletes the collected data from your machine. This can become quite an annoying and lengthy process so you can use a maintenance tool like which will do this automatically with a click of a button. This powerful software can also fix various system errors, corrupted files, and registry issues which is especially helpful after virus infections.
3. Scan the system for adware
Adware is a type of program that generates commercial content like pop-ups, banners, and redirects on your machine to collect revenue.
Such PUPs (potentially unwanted programs) are mostly spread on freeware distribution sites. The owners of these platforms include additional programs in the installers without clearly disclosing this. Most people skip through the installation process and do not notice bundled software. That is why it is so important to have a tool that can detect these processes for you.
Professional security tools will scan your machine, eliminate intruders, and prevent such infections in the future by giving you a warning before a suspicious program can make any changes. Otherwise, you can use the guide below to remove the supposed antivirus if you have installed it or to try to identify any suspicious programs that should not be on your computer:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click on Uninstall at the bottom.
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select unwanted plugin and click Remove.
- Click Safari > Preferences...
- In the new window, pick Extensions.
- Select the unwanted extension and select Uninstall.
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
- Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
- Pick the unwanted application by clicking on it once.
- At the top, click Uninstall/Change.
- In the confirmation prompt, pick Yes.
- Click OK once the removal process is finished.
Questions about McAfee Total Protection has expired e-mail scam
I opened the "Windows Security Center: Your McAfee subscription has expired today." e-mail. Am I hacked?
No. Opening and reading a phishing e-mail does not give anyone access to your account or your PC. Modern mail programs block scripts and remote content by default, so reading the message "Windows Security Center: Your McAfee subscription has expired today." only showed you text and pictures.
The danger comes from clicking the button and typing your password on the page it opens, or from opening an attached file. If you did neither, report the message as phishing and delete it.
If you clicked but closed the page without typing anything, there is also nothing to fix. If you did type a password, change it from another device and turn on two-step verification.
I typed my password after "Windows Security Center: Your McAfee subscription has expired today.". What now?
Act within the hour. From another device, open the real site of the account the message "Windows Security Center: Your McAfee subscription has expired today." imitated and change the password. If the same password is used anywhere else, change it there too.
Sign out of all other sessions, check the recovery e-mail and phone number, and look for mail forwarding rules or filters you did not create. Then turn on two-step verification with an authenticator app or a passkey.
If the fake page also asked for a card number or a bank login, call your bank and ask them to block the card. Finally, report the e-mail so others are warned.
Could McAfee Total Protection has expired be a genuine message?
We checked it, and it is not. A well-known company is only the costume. The message exists to get your password, and real companies handle that inside your account, after you sign in normally, not through links, attachments or phone numbers in a message you did not expect.
Scammers copy logos and footers perfectly, so the design proves nothing. The sender address, the link target and the request are the reliable signs, and all three point to a scam here. Delete it, and if you are worried, check your account directly.
Why does McAfee Total Protection has expired say that your account needs urgent attention?
Because that story works. A problem that needs fixing, a deadline and a simple solution make people act before they check.
The claim that your account needs urgent attention is the same for everyone who received McAfee Total Protection has expired; it was written once and sent in bulk. Nothing about your own situation triggered it.
If you are unsure, look at the real account or service the normal way, without using the message. The claim will not be there, which settles the question. Then report the message.
What does McAfee Total Protection has expired want from me?
In the end, your password. Everything else in McAfee Total Protection has expired, from the logo to the deadline, is there to get you to that point without stopping to think.
Knowing the goal helps you judge your risk. If you did not give it, you lost nothing and can delete the message. If you did, the steps in this guide are ordered by what you handed over:
- passwords first
- then card and bank details
- then documents and anything you installed
- ran
Act on the highest item on that list first.
How do I contact the real a well-known company?
Not through anything in McAfee Total Protection has expired. Type the official website address into the browser yourself, use the app you already have, or use the phone number printed on your card, contract or a previous genuine invoice.
Search results can be risky too, because scammers buy ads for support numbers. Once you reach the real a well-known company, you can ask whether there is any problem with your account and report the scam message; many companies have a dedicated address for phishing reports on their security page.
Is it worth reporting a scam if I lost nothing?
Yes. Reports from people who did not fall for McAfee Total Protection has expired are how blocklists, mail filters and hosting companies find new scam pages quickly, often before most recipients open the message. Reporting the message as phishing in your mail app is enough for most people.
If the message impersonates a company, its security or abuse team usually accepts forwarded copies too. Police reports matter mainly when money or documents were lost, but national fraud centres also collect reports without losses to spot campaigns.
How urgent is McAfee Total Protection has expired?
Urgent enough to act today, not urgent enough to panic. The sign reported, an e-mail with the subject "Windows Security Center: Your McAfee subscription has expired today.", means someone is using or testing your details. Changing the password and turning on two-step verification takes ten minutes and usually locks them out.
If a payment is involved, the sooner the bank knows, the better the chance of getting it back. Do not respond to calls or messages that arrive right after the incident, even if they claim to be from your bank: call the bank yourself.
Should I scan my PC after McAfee Total Protection has expired?
Yes, it is a quick way to rule out one possible cause. Open Windows Security and run a full scan; it takes about half an hour.
If it finds nothing and there are no unknown programs or extensions, the account problem behind an e-mail with the subject "Windows Security Center: Your McAfee subscription has expired today." most likely started with a leaked or phished password.
If it finds a stealer or trojan, remove it first, then change your passwords from another device, then sign out of all sessions, because stolen cookies keep working until you do.
Will Fortect remove McAfee Total Protection has expired?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For McAfee Total Protection has expired, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Csoonline: Social engineering: Definition, examples, and techniques (read October 6, 2026)
- Wikipedia, the free encyclopedia: Potentially unwanted program (read October 6, 2026)
- Crimestoppers-uk: Streaming online – know the risks (read October 6, 2026)
- FTC: How to recognize and avoid phishing scams (read October 6, 2026)
- CISA: Recognize and report phishing (read October 6, 2026)