Impersonation Scams
Geek Squad Scam Emails: How to Spot Them
A Geek Squad invoice for a subscription you never had is one of the most common scam emails in circulation. Here is what it is really after.
Quick answer
Do not call the number. A Geek Squad invoice for a renewal you never signed up for is a refund scam: the goal is to get you on the phone, install remote-access software, and stage a fake 'overpayment' so you send money back. There is usually no link and no attachment, which is exactly why the email slips past filters. Check your card statement for any real charge, then delete the email and block the sender.
Warning signs to look for
- An invoice for an annual protection plan costing several hundred dollars
- A prominent 'cancellation' or 'billing' phone number and no working link
- A plain-looking invoice with an order number, sometimes as a PDF or image
- Your name missing or replaced with a generic greeting
- A sender address on a free mail provider rather than a Best Buy domain
- Pressure to call within 24 hours to avoid being charged
Why this scam has no link
Most phishing wants a click. This one does not, and that is deliberate. By putting the payload in a phone number instead of a URL, the email avoids the link-scanning that email providers rely on, which is part of why these invoices are so persistent. The email's only job is to make you angry or worried enough about a charge you did not authorise to pick up the phone. Everything that follows happens on the call.
What happens if you call
The person who answers is friendly and offers to cancel the subscription and refund you. To 'process' it, they ask you to install remote-access software so they can see your screen. They then open your banking page and manipulate what is displayed so it appears they refunded far too much — several thousand instead of a few hundred. Distress does the rest: the victim is asked to return the difference by bank transfer, gift cards, or cash, and because they believe they are correcting someone's honest mistake, they often comply. No money was ever refunded.
How to confirm nothing was charged
Look at your actual card or bank statement rather than the invoice. If no charge exists, there is nothing to cancel and nothing to dispute — you can simply delete the email. If you genuinely have a Best Buy or Geek Squad plan and want to check it, sign in to your account at bestbuy.com by typing the address yourself, or call the number printed on a real receipt or on the back of your card for the payment method involved.
What Best Buy asks customers to do
Best Buy publishes fraud guidance for Geek Squad impersonation and asks customers to report suspicious emails and calls rather than engaging with them. Their consistent advice, echoed by the FTC, is that no legitimate company will ask you to buy gift cards, send cash, or provide remote access to process a refund. If you are asked to do any of those things, the call is a scam.
If you already called or installed something
Disconnect the computer from the internet and uninstall any remote-access tool they had you install, then run a full antivirus scan. Change your online banking and email passwords from a different device. Call your bank on the number on your card, explain that someone had remote access to your machine while you were signed in to banking, and ask them to review the account. If you sent money, report it to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov the same day.
Check the invoice instead of calling
If an invoice has you worried enough to reach for the phone, forward it to check@spamcheck.com first. SpamCheck will tell you plainly whether it is a genuine bill or the refund scam, and what to do next — before you dial anything.
SpamCheck is not affiliated with or endorsed by the companies mentioned in this guide. Brand names are used only to help consumers identify potential impersonation scams.
Frequently asked questions
- Should I call to cancel a subscription I never signed up for?
- No. If the charge is not on your statement, there is nothing to cancel. Calling is the scam's only objective.
- Why did they email me? Do they know I use Geek Squad?
- Almost certainly not. These invoices are sent in bulk to addresses from data breaches, on the assumption that a fraction of recipients will be customers or will worry anyway.
- They already had my name and address. Is that a bad sign?
- It is normal. Names and addresses circulate widely in breach data. Personal details do not make a message legitimate.
- Is SpamCheck affiliated with Geek Squad or Best Buy?
- No. SpamCheck is independent and is not affiliated with, sponsored by, or endorsed by Best Buy or Geek Squad. The names are used only to help people recognise impersonation.
Sources
SpamCheck provides informational risk assessments and cannot guarantee that any message is completely safe. When money or sensitive information is involved, independently contact the organization using a trusted phone number or website.
About SpamCheck
SpamCheck helps people understand suspicious emails by letting them forward the message to check@spamcheck.com and receive a plain-English analysis. This guide was published by SpamCheck and written and reviewed by the SpamCheck Editorial Team.
Related guides
Norton Scam Emails: How to Spot Them
A Norton antivirus renewal charge you never approved is almost always a refund scam. Here is how to check it in a minute.
McAfee Scam Emails: How to Spot Them
McAfee impersonation comes in two flavours: a renewal invoice and an 'your protection has expired' warning. Both want the same thing.
Microsoft Account Scam Emails: How to Spot Them
Fake Microsoft security alerts and 'your PC is infected' pop-ups both lead to the same place. Here is how to check what is real.
Fake Invoice Emails: How to Spot Them
Invoice scams work because paying bills is normal. Here is how to check any unexpected invoice before money moves.
The Top 10 Online Scams Targeting Seniors Right Now
Scammers target older adults deliberately, not accidentally. Here are the ten plays they run most — and the counter for each.
Amazon Scam Emails: How to Spot Them
Fake order confirmations and Prime renewal notices are designed to make you call. Here is how to check any Amazon message in under a minute.