Quick answer
Fake renewal emails claim you are about to be charged hundreds of pounds for software you do not recognise. They include an urgent phone number to cancel. Do not call it — it connects to scammers who may try to access your computer or bank account. Delete the email.
Fake subscription renewal scams are one of the most common types of fraud in the UK. They arrive by email, sometimes by text, and they work by creating panic — the message tells you a large charge is about to leave your account, and the only way to stop it is to call a number. Immediately. Right now.
The most well-known version uses the Geek Squad name. Others use Norton, McAfee, Amazon Prime, PayPal, or generic cloud storage services. The names change. The pattern doesn't.
What a fake renewal email looks like
Here's a real example received in 2026:
Subject: Payment Method Update Needed
We were unable to process the scheduled renewal for your cloud storage plan. To avoid service interruption, please review your billing information.
Account Email: [your real email address]
Storage Plan: Cloud Storage – 250 GB
Subscription ID: CLD-STR-482019
Your current payment method is no longer valid. If this issue is not resolved, access to syncing, backups, and file availability across devices may be limited.
[Update Billing Information]
Notice what makes it look convincing: it uses your real email address, gives a plausible subscription ID, and describes a real fear — losing access to your files. The formatting is professional. There's no obvious spelling mistake.
But look at the sender address. That domain — tthh9ugkavyfywggiynm.com — has nothing to do with any cloud storage company. And the link goes to habit.superzoh.com. Again, nothing to do with the service it claims to be from.
When this message was put through Summarly, it flagged the sender domain immediately, noted that the company name used was entirely generic with no specific brand, and identified the pressure tactics designed to create urgency.
The warning signs to look for
- The sender's email domain doesn't match the company it claims to be from
- You're asked to call a phone number rather than log in to your account
- There's a deadline — usually 24 or 48 hours — to take action
- The charge is for a service you don't recognise or didn't sign up for
- The company name is generic — "Cloud Storage Services", "Tech Support Team" — rather than a specific brand
- The links go to a domain that doesn't match the claimed sender
- The unsubscribe link also goes to a suspicious domain
Why calling the number is dangerous
The phone number in these emails doesn't go to Geek Squad, Norton or Amazon. It goes to a call centre run by the scammers.
Once you call, the script usually goes one of two ways. In the first version, they say they need remote access to your computer to process the cancellation. They install software that gives them control of your screen. From there, they can access your banking, your passwords, and anything else stored on the device.
In the second version, they tell you a refund has been accidentally overpaid to your account. They ask you to transfer the difference to a "safe account". There is no overpayment. There is no safe account. The money goes directly to the fraudsters.
Both versions are devastatingly effective because by the time you realise what's happened, it's too late.
What to do if you receive one of these emails
What to do now
- Do not call the phone number in the message under any circumstances
- Do not click any links in the email
- If you have a genuine account with the named service, log in directly through the official website — not through any link in the email
- If you've already called and given remote access, disconnect your internet immediately and call your bank
- Forward the email to report@phishing.gov.uk
- Mark the email as spam and delete it
How to verify if a charge is real
If you're worried there might be a genuine charge coming, the safest thing to do is check your bank statement or go directly to the company's official website — the one you'd find by searching for it, not the link in the email.
For Geek Squad specifically: Geek Squad is a service run by Best Buy, which doesn't operate widely in the UK. If you receive a Geek Squad renewal email and you're in the UK, it's almost certainly a scam.
For Amazon Prime, Netflix, or other legitimate services: log in to your account through the official app or website and check your subscription and payment settings there. Any genuine issue will show up in your account.
Not sure about a message you've received?
Paste it into Summarly and get a plain-English explanation of what it appears to say, what looks suspicious, and what to do next.
Check a message freeFrequently asked questions
How do I know if a subscription renewal email is a scam?
The strongest signal is being asked to call a phone number rather than log in to your account. Legitimate services manage everything through your account portal. A short deadline, an unrecognised charge, and a sender domain that doesn't match the company are all additional warning signs.
Is the Geek Squad renewal email a scam?
Most unexpected Geek Squad renewal emails received in the UK are scams. Geek Squad is a US-based service and doesn't send unsolicited renewal emails to UK addresses. Do not call the number. Check your bank statement for any actual charge and contact your bank directly if one appears.
What happens if I call the number?
You'll reach a scammer posing as customer support. They will typically either ask for remote access to your computer, or convince you to transfer money to cancel a supposed overpayment. Once remote access is granted or money transferred, recovery is very difficult.
I already called. What should I do?
If you gave remote access to your computer: disconnect from the internet immediately, run a security scan, and change your passwords from a different device. If you transferred money: call your bank immediately on the number on the back of your card and report it as fraud. Also report to Action Fraud at actionfraud.police.uk or 0300 123 2040.