Skip to content

Is this Norton email real? Check the sender

Norton subscription emails come from norton.com. A renewal invoice from a free mailbox is not Norton. Paste the sender’s address to see who actually sent it.

  • Is it really norton.com?
  • Free sender check
  • The sender is never notified

Look up an email address

Free check

No card needed. We never email the address you check.

How to check a Norton email

The charge in the email is invented. The panic it causes is the product.

  1. Copy the real address

    Tap the sender name to reveal the full address and paste that, not the name shown.

  2. Check the domain

    See whether it is norton.com, when the domain was registered, and which provider runs the mailbox. Free.

  3. Check your Norton account

    Sign in at my.norton.com, typed yourself, and look at your subscription there.

What gives away a fake Norton email

Fake Norton 360 auto-renewals and “your protection has expired” warnings, both built to make you call a number or click a link.

The real Norton domain

  • Mail from norton.com or one of its subdomains
  • The domain’s registration date and registrar
  • Free mailboxes billing as Norton or NortonLifeLock

Lookalike giveaways

  • “norton” plus words like “-renewal” or “-billing”
  • A brand-new domain with a Norton logo
  • An invoice with only a phone number to cancel

Sender authentication

  • SPF published or missing
  • DMARC published or missing
  • Mail provider behind the domain

Who is behind it

  • Accounts tied to the address
  • Names shown publicly
  • In the full report

Norton emails worth checking first

  • “Norton 360 renewed — $299.99 charged”
  • “Your subscription has expired”
  • Viruses “detected” in an email
  • A number to call for a refund
Check an email

Norton scam email questions

What address does Norton send email from?

Subscription and account emails come from norton.com or a subdomain of it. An invoice from Gmail, Outlook or an unrelated domain is not from Norton.

I do not even have Norton. Why did I get a renewal invoice?

Because the scam is sent to millions of addresses. The invoice is fake; it exists to make you call the number on it. Delete it.

Can an email tell me my computer has a virus?

No. An email cannot scan your computer. A message saying viruses were found is a scam, whatever brand it uses.

Where do I report a fake Norton email?

Mark it as phishing in your mail app and delete it. In the US, report it to the FTC at reportfraud.ftc.gov.

Does the sender find out I checked?

No. Nothing is sent to the address and nobody is notified. The check reads DNS records, the domain registration and public sources only.

Guides worth reading

All articles

Check the sender before you reply to Norton

The free check takes ten seconds, and nothing is sent to the address.