Geek Squad Scam Email: How to Spot a Fake Best Buy Renewal Invoice (2026)

Your inbox dings. The subject line says "Your Geek Squad subscription has been renewed — $499.99 charged." There's an invoice number, a fake order ID, and a phone number that looks official. Most people never paid for Geek Squad in the first place — that's the trick. The email is designed to make you panic and call the number to "cancel the charge." The moment you call, the real scam begins. Last year the FBI's Internet Crime Complaint Center (IC3) logged more than $49 million in losses from this exact scheme, with retirees over 60 hit hardest. Here's how to spot it in 10 seconds, what happens if you call, and exactly what to do if you already gave them money or remote access to your computer.

What the Geek Squad scam email actually is

It's a phishing email impersonating Best Buy's Geek Squad tech support service. There is no real subscription and no real charge. The email is bait to get you to call the phone number printed inside it. Once you call, a scammer pretending to be Geek Squad will offer to "refund" you — which requires either remote access to your computer or your bank login. Both lead to drained accounts. The FTC has called the variant of this scheme the #1 impostor refund scam of 2025.

The 6 red flags in every fake Geek Squad email

1. It says you've been charged — usually $299.99, $349.99, $399.99, or $499.99 — for an "auto-renewal" you don't remember signing up for.
2. The sender address isn't @bestbuy.com or @geeksquad.com. Look for off-brand addresses like geeksquad-billing@gmail.com, support@geek-squad-renewal.com, or random Gmail/Outlook addresses.
3. The invoice is an image or PDF attachment — scammers do this so spam filters can't read the suspicious text inside.
4. There's a phone number prominently displayed, often labeled "Call to cancel" or "Billing Support." Real Geek Squad billing issues are handled by logging into your Best Buy account, not by calling a number in an email.
5. Urgency and fear language: "Charge will post in 24 hours," "Final notice," "Auto-renewal confirmed."
6. Generic greeting ("Dear Customer," "Hello User") instead of your real name — Best Buy always uses your name on real receipts.

What happens if you call the number in the email

This is where most of the money is lost. The script is nearly identical every time — and once you know it, the calls become obvious:

1. A friendly "Geek Squad agent" answers and apologizes for the confusion. They say they can refund the charge if you let them "verify your account."
2. They ask you to download remote-access software — AnyDesk, TeamViewer, UltraViewer, or a tool they call "Geek Squad Support Tool." Once installed, they control your computer.
3. They open your bank's website and pretend to process a refund. They claim they accidentally refunded too much — say, $4,999 instead of $499 — and beg you to send the difference back in gift cards, wire transfer, or Zelle to avoid "getting fired."
4. What actually happened: they moved money between your own accounts (checking to savings) to make it look like a deposit. The "extra refund" is your own money. The cash you send back is the loss.
5. In a second variant, they ask for your bank login or credit card to "process the refund" — then drain the account directly.

5 fake Geek Squad scripts circulating in 2026

1. The auto-renewal invoice

The classic. An email arrives claiming your Geek Squad annual protection renewed for $399.99–$499.99 and provides a number to call to cancel.

2. The "unauthorized device added" alert

A scarier variant: "A new device was added to your Geek Squad protection plan. If this wasn't you, call us immediately." Same trap — the number leads to a refund scammer.

3. The PDF attachment invoice

The body of the email is nearly empty. The invoice is inside a PDF named something like "GeekSquad_Invoice_8472.pdf." Opening the PDF can also install tracking pixels — preview only with caution and never click links inside it.

4. The text-message version

Increasingly common in 2026. A text from an unknown number: "Geek Squad: Your subscription auto-renewed for $349.99. To cancel, call 1-888-XXX-XXXX." Same scam, smaller screen.

5. The follow-up phone call

If you reported a previous scam, expect a follow-up call from someone claiming to be "Geek Squad Refund Department" or "FTC Recovery Unit" offering to get your money back — for a fee. This is the recovery scam. It targets people who already lost money. No legitimate agency charges to recover stolen funds.

What real Best Buy Geek Squad emails look like

• Sender is always @emails.bestbuy.com, @bestbuy.com, or @geeksquad.com — never Gmail, Outlook, Yahoo, or hyphenated lookalike domains.
• Uses your real first and last name from your Best Buy account, not "Dear Customer."
• The charge appears in your Best Buy order history when you log in directly at bestbuy.com — no need to call.
• Never asks you to download remote-access software like AnyDesk or TeamViewer.
• Never asks for payment in gift cards, wire transfers, Zelle, Cash App, or cryptocurrency.
• Provides a way to manage the subscription inside your account at bestbuy.com/account, not a phone number to call.

What to do if you already called the number

If you only spoke with the scammer and didn't give them remote access, money, or personal info, you're probably fine — just hang up, block the number, and delete the email. But if any of the following happened, act in this exact order in the first 24 hours:

1. If you let them install remote-access software (AnyDesk, TeamViewer, UltraViewer, etc.): disconnect from the internet immediately (unplug Wi-Fi or Ethernet). Uninstall the software. Run a full scan with Windows Defender or a reputable antivirus, then change every password from a different, clean device — start with email and banking.
2. If you logged into your bank or credit card with them watching: call your bank's fraud line (numbers below) right now. Tell them "impostor refund scam, possible account takeover." Freeze the account, change online-banking credentials, and ask them to flag all pending transactions.
3. If you sent money by gift card: call the issuer's fraud line immediately — Apple 1-800-275-2273, Google Play 1-888-280-4331, Target 1-800-544-2943, eBay 1-866-540-3229, Walmart 1-888-537-5503. Cards reported in the first few hours can sometimes be frozen before redemption.
4. If you sent money by wire: call your bank within hours and request a recall. Wire recalls only work in a very short window.
5. If you sent Zelle, Cash App, or Venmo: call your bank's fraud line and ask them to file an impostor-scam claim under the 2023 Regulation E reimbursement rules. Banks (Chase, Bank of America, Wells Fargo, and others) are now required to investigate Zelle impostor fraud and may reimburse if reported within 60 days.
6. Place a 90-day free fraud alert with Experian (1-888-397-3742) — they're required to notify Equifax and TransUnion. Consider a full credit freeze at all three bureaus if they accessed sensitive data.
7. Report to the FTC at ReportFraud.ftc.gov and to the FBI's Internet Crime Complaint Center at ic3.gov. Include the email, the phone number called, every dollar amount, and every transaction ID.
8. Forward the original phishing email to phishing@bestbuy.com and to the Anti-Phishing Working Group at reportphishing@apwg.org, then delete it.

Major bank fraud line numbers (save these now)

• Chase: 1-800-935-9935 (also handles Zelle disputes)
• Bank of America: 1-800-432-1000
• Wells Fargo: 1-800-869-3557
• Citi: 1-800-950-5114
• Capital One: 1-800-227-4825
• U.S. Bank: 1-800-USBANKS (1-800-872-2657)
• PNC: 1-888-762-2265
• Truist: 1-844-487-8478
• American Express: 1-800-528-4800
• Discover: 1-800-347-2683

How to stop future Geek Squad scam emails

• Mark the email as phishing in Gmail (three-dot menu → Report phishing) or in Outlook (Report → Phishing). This trains the filter to catch the next one.
• Never click "unsubscribe" links in scam emails — it confirms your address is active and you'll get more.
• Turn on two-factor authentication for your Best Buy account, email, and banking. Use an authenticator app (Google Authenticator, Authy) instead of SMS if possible.
• Use a password manager (Bitwarden, 1Password, iCloud Keychain) so the lookalike sign-in pages scammers send can't trick you — the manager only autofills on the real domain.
• Subscribe to a scam alert service that warns about new impostor email scripts before they reach you.

Geek Squad scam email FAQ

Does Geek Squad send invoice emails?

Best Buy sends order confirmations and renewal reminders from @emails.bestbuy.com — but they always include your real name, link only to bestbuy.com, and never tell you to call a phone number to cancel a charge. Manage real Geek Squad subscriptions by signing in at bestbuy.com/account.

What's the real Geek Squad phone number?

Best Buy's verified customer service number is 1-888-237-8289 (1-888-BESTBUY). Geek Squad support is reached through the same number or through your Best Buy account dashboard. Do not use any number printed inside an unsolicited email or text.

Will my bank refund a Geek Squad refund scam?

It depends on how you paid. Credit card charges are usually refundable under Fair Credit Billing Act dispute rights (60 days). Debit card and Zelle/Cash App impostor-scam claims must be filed quickly — under 2023 Regulation E rules, many banks now reimburse impostor-scam Zelle losses, but report within 60 days of the statement showing the charge. Gift cards and wire transfers are rarely recovered after the first 24 hours.

Can scammers get into my computer just from an email?

Not from opening the email itself in modern Gmail, Outlook, or Apple Mail. The danger is clicking a link, opening an attachment, or — by far the biggest risk — calling the number, where you'll be talked into installing remote-access software like AnyDesk that hands them full control of your computer.

Is the Geek Squad scam the same as the Norton or McAfee scam email?

Same scam, different brand. Identical fake-invoice emails circulate impersonating Norton, McAfee, PayPal, Amazon Prime, and Microsoft 365. The red flags and recovery steps are the same: don't call the number, log into the real account directly to verify, and report it.

Should I reply to the email to tell them it's a scam?

No. Replying confirms your address is active and reaches a real person. Report it as phishing in your email app, forward to phishing@bestbuy.com if it's a Best Buy impersonation, then delete.

How Safe Retire Watch helps

Members get real-time alerts the moment new Geek Squad, Norton, McAfee, PayPal, and Amazon impostor email scripts hit U.S. inboxes — plus a one-page Emergency Action Guide listing every bank fraud line, gift-card issuer, and federal reporting hotline with the exact words to say. Built specifically for retirees and their families: plain English, large readable text, no jargon. Plans from $9/month with a 30-day money-back guarantee.