Is Antivirus Alert Legit or a Scam?

Fake McAfee or Norton pop-ups and texts claiming your subscription has lapsed. Here's what you need to know.

Last Updated: February 3, 2026

Our Assessment
Likely Scam
Messages matching this pattern are almost always fraudulent.

Check Your Message - Free & Private

Received a suspicious antivirus alert message? Paste it into our AI-powered checker for instant analysis. No data is stored - your privacy is protected.

Check Now

Common Examples of Antivirus Alert Scams

McAfee: Your protection has expired. Your PC is at risk. Renew now: mcafee-renew.co
NORTON ALERT: 5 viruses detected on your device. Click to remove immediately.
Your antivirus subscription expired. Purchase protection now to avoid data theft.

Why Am I Receiving This?

Scammers use McAfee and Norton logos because many people have real subscriptions with these companies. The FTC has taken action against fake McAfee pop-up campaigns that harvest credit card details under the guise of renewal.

What To Do Next

How to Spot a Antivirus Alert Scam

Look for these common red flags:

When in doubt, never click links in unexpected messages. Instead, go directly to the official website by typing the address yourself, or contact the company through their verified customer service channels.

Frequently Asked Questions

How accurate is the Antivirus Alert scam detector?
Our AI analyzes multiple indicators and provides a confidence level with each verdict. While highly accurate for common scam patterns, always verify suspicious messages through official channels.
Is my message stored or shared?
No. Your message is processed transiently by AI and immediately discarded. We never store, log, or share any content you submit.
What should I do if I've already clicked a suspicious link?
Change your passwords immediately, enable two-factor authentication, monitor your accounts for unusual activity, and run antivirus scans on your devices.
How do I report this scam?
Forward scam texts to 7726 (SPAM), report phishing emails to the FTC at reportfraud.ftc.gov, and notify the company being impersonated through their official security channels.