Is this Norton renewal invoice email a scam?

How to spot the Norton scam

• There is a phone number and no way to cancel online. That inversion is the whole design: a real subscription is managed in your account, and this one can only be argued with by voice.
• A deadline of about 24 hours to dispute the charge. The FTC quotes that same window in its own alert, because panic is what gets people dialling.
• The charge is for hundreds, far more than the product costs. The figure is chosen to be alarming enough to override the instinct to check your bank first.
• The email has no link to an account, or the link goes nowhere useful. There is nothing to click because the number is the payload.
• Whoever answers wants remote access to your computer. The FTC is explicit about where that goes: spyware installed, online banking credentials stolen, the account drained.
• You are asked for bank details so the refund can be processed. The refund is the trap, not the resolution.
• Then comes the reversal: they claim they refunded too much and ask you to send the difference back, by gift card, wire transfer, bank transfer, cryptocurrency or a payment app. Those are the routes that cannot be reversed, which is exactly why they are named.

What to do now

1. Do not call the number. A genuine subscription is cancelled from your account, never through a number printed in an email.
2. Check your bank or card statement. No charge means no renewal, whatever the invoice shows.
3. Report it to Norton at spam@norton.com. Norton asks for the message to be forwarded as an attachment rather than pasted, so the technical headers it needs for analysis survive.
4. Never grant remote access to a caller. If you already have, disconnect from the internet, run a security scan, and change your banking passwords from another device.
5. If money left your account, call your bank now, and report it at ReportFraud.ftc.gov.
6. Delete the email once it has been reported.