Are these scam emails?

AVG Subscription
9

Hello Diane,
Thank you for contacting AVG Support Community.
This isn't the experience we want you to have. We'd like to clarify this to you that the charge doesn't seem to be related to AVG.
We are escalating this case to our higher level and they will get back to you via email.
Thank you for your understanding.

8

This is also a scam correct? We didn't buy nor subscribe to anything…
AvG 880 Advance Care+
Email informing us that we renewed AvG care+

10

Diane,

Has anyone reached back out to you about this? Today (July 26th) I received a similar email with an invoice for over $300.

3

I also received a similar email, but with a different product name. I work in cyber security and this email immediately raised red flags:

1. Why is there a PDF attachment? Nobody attaches a PDF of the email they're sending,because it's expensive and redundant. It likely co tains an exploit.
​​​​​​2. Contains a "click to print" button? No, thank you.
3. Doesn't Indictate netgos of payment being billed.
4. I received 3 identical emails, which is what actually caught my attention.
5. I have never used AVG products, nor has anyone in my family.
6. The hyperlinks are legitimate, but only go to general pages, not directly to account inormation, which drives the reader to…
7. The phone number that is not a typical toll-free USA number and is a Virginia area code. AVG doesn't have an office in Virginia.
8. AVG doesn't have the product listed in the email, nor does it have products in that price range. People also assume an obscure price tag is legitimate, rather than one that is precisely rounded to $350 or $380.

In short, DO NOT call that number. You should see that your accounts have not been debited for the quoted amount. Overall, this is a pretty good phishing email, except for the two extra copies. I give it a B or B- grade.

11

I also received a similar email, but with a different product name. I work in cyber security and this email immediately raised red flags:

1. Why is there a PDF attachment? Nobody attaches a PDF of the email they're sending,because it's expensive and redundant. It likely co tains an exploit.
​​​​​​2. Contains a "click to print" button? No, thank you.
3. Doesn't Indictate netgos of payment being billed.
4. I received 3 identical emails, which is what actually caught my attention.
5. I have never used AVG products, nor has anyone in my family.
6. The hyperlinks are legitimate, but only go to general pages, not directly to account inormation, which drives the reader to…
7. The phone number that is not a typical toll-free USA number and is a Virginia area code. AVG doesn't have an office in Virginia.
8. AVG doesn't have the product listed in the email, nor does it have products in that price range. People also assume an obscure price tag is legitimate, rather than one that is precisely rounded to $350 or $380.

In short, DO NOT call that number. You should see that your accounts have not been debited for the quoted amount. Overall, this is a pretty good phishing email, except for the two extra copies. I give it a B or B- grade.

1

I received this invoice that they say has been paid and I did not order anything.  Is this a scam directed to me yet naming your company as the sender?  Please advise ASAP and if it is a scam, let me know who to forward this to so they can investigate.  Thank you for your attention in this matter.  See below

DIANE PALIANTO

INVOICE HGRTEFR45E5RT DETAILS
AVG Subscriptions
  
					<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">
								<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">DUE 07/19/2022</td></tr><tr><td colspan="1" rowspan="1">$379.88</td></tr><tr><td align="center" colspan="1" rowspan="1">
											<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"><a href="http://links.notification.intuit.com/ls/click?upn=LEV65WI9EZ1l5TkUt4hKqzq6J49VEXJMRhUxqRckK3UK6eeEy0A-2FylQ0WpPN9IR9nATq3WhntsTLMCi919IHWK7cIi-2B3iEYhGBTc44lQ0P2KbragnEudKlHvUBxegN5eoW-2BYu62Ma6hC-2F92p1DV-2BPf75Uxnrlnmfqo7IUaFIZGuyxbAUKVDdIgVY8NLE-2Bd0umbGzQSK9Dt122EoJ2U7D2-2BQBCOmlEDQjJoQo9q43jRuj6sUQFlSbGNFJituFX0elWntElEFV5luJ8llc73vLbA-3D-3D6Y5e_J9Rg-2FAHhivH-2BFetUhQP4aviKAxx8iO7yZpnU58koMNtjt1BTB-2FDxbbyQaOEJKZA2eCDsrBUsSqodPkzbFt-2FFFmNtfySTNGkWM8Kqh1oxQpjuescUTKKDyjxgc-2FV-2FvZ-2B4DRx9QWk-2BkQ-2BjiMfURorit4JmkIXSr-2BPdv8O9TfftQmlYj2jS7pL3OwDRKCvgPsbTM7Mq4XYLW0-2BN7cepeeVkbqEkESO0BsC5ztc3OT9Qv36L1OqObI4X1ydOG6VLeemjtS52qITVc6Xk0sDDhUjrEuNFk0xTH8ut-2FU1aDMnmMUajp4C9miPf0C9WyemeGqWe1RM3gHkeQnLtR0VE7eydVNcnx251Eb-2FEan9JEMdSuAJQwxHUiLA0Ix7nDZ2NRF-2BIghKhJ2HWHiwikF6PFsVaBKaNIbsDWR7AlY1BCrTrZMRzRMAs6Zs2oPU-2F-2FSZbY8WwnHGMTKBN21MCt2-2FIa28-2BWxg3fHOANKnwmfmTZGgroVDx0UsHthQSchT9gFwUqMbLXAlAOp5sgwOqsMa0ZhFyA57gzC6lIgIZtk1U8koVKr4PjFTPQ9Ign5awlaLOhmTNnhl39g0WmZ-2FotPQTwE7p0PGLbIpuFNtAGgBJLAUG1prKPHcGQdrmGdXekPiYvGQAPtNYeKwhSM2Z2zqjK57qmaM03x0QXqueAa86BntAp3Q-3D" target="_blank">Print or save</a></td></tr></tbody></table>
											</td></tr><tr><td colspan="1" rowspan="1">Powered by QuickBooks</td></tr></tbody></table>
								</td></tr></tbody></table>

					<p>Your payment for the AVG® Home Sino Protection - 3 Years Plan has been processed successfully. The amount should reflect in your credit card under the name &quot;AVG-ORDERS&quot;.<br>						<br>						Please reach out at (347) 480-1326 if you have any queries.</p>

					<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">
								<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">
											<table><tbody><tr><td colspan="1" rowspan="1">Bill to</td><td colspan="1" rowspan="1">AVG CUSTOMER ID: ZBS1W45ICAFGER</td></tr></tbody></table>
											</td></tr><tr><td colspan="1" rowspan="1">
											<table><tbody><tr><td colspan="1" rowspan="1">
														<table><tbody><tr><td colspan="1" rowspan="1">Terms</td><td colspan="1" rowspan="1">Paid</td></tr></tbody></table>
														</td></tr></tbody></table>
											</td></tr></tbody></table>
								</td></tr></tbody></table>

					<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">
								<table><tbody><tr><td colspan="1" rowspan="1">
											<table><tbody><tr><td colspan="1" rowspan="1">
														<table><tbody><tr><td colspan="2" rowspan="1">07/19/2022</td></tr><tr><td colspan="1" rowspan="1">Services</td><td colspan="1" rowspan="1">$379.88</td></tr></tbody></table>

														<table><tbody><tr><td colspan="1" rowspan="1">AVG® Home Sino Protection</td></tr></tbody></table>

														<table><tbody><tr><td colspan="1" rowspan="1">
																	<table><tbody><tr><td colspan="1" rowspan="1">1 X $379.88</td></tr></tbody></table>
																	</td></tr></tbody></table>
														</td></tr></tbody></table>
											</td></tr></tbody></table>
								</td></tr></tbody></table>

					<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td align="right" colspan="1" rowspan="1">
								<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Balance due</td><td colspan="1" rowspan="1">$379.88</td></tr></tbody></table>
								</td></tr></tbody></table>

					<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Transaction Id: #WVLTXDSSZYR90FGTY<br>									<br>									Amount of $379.88 has been processed Successfully on your Cheking account.<br>									<br>									If you have any questions call our support hotline at (347) 480-1326 with your Invoice Number.<br>									<br>									Product Key: 571I2-ODA2G-93CK8-7ZP8N-W6T5V<br>									<br>									3 year(s) protection for unlimited device(s) and 500GB storage<br>									<br>									Supports Microsoft® Windows®, Mac OS®, iOS®, Android„¢</td></tr></tbody></table>

					<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td align="center" colspan="1" rowspan="1">
								<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"><a href="http://links.notification.intuit.com/ls/click?upn=LEV65WI9EZ1l5TkUt4hKqzq6J49VEXJMRhUxqRckK3UK6eeEy0A-2FylQ0WpPN9IR9nATq3WhntsTLMCi919IHWK7cIi-2B3iEYhGBTc44lQ0P2KbragnEudKlHvUBxegN5eoW-2BYu62Ma6hC-2F92p1DV-2BPf75Uxnrlnmfqo7IUaFIZGuyxbAUKVDdIgVY8NLE-2Bd0umbGzQSK9Dt122EoJ2U7D2-2BQBCOmlEDQjJoQo9q43jRuj6sUQFlSbGNFJituFX0elWntElEFV5luJ8llc73vLbA-3D-3Du7bS_J9Rg-2FAHhivH-2BFetUhQP4aviKAxx8iO7yZpnU58koMNtjt1BTB-2FDxbbyQaOEJKZA2eCDsrBUsSqodPkzbFt-2FFFmNtfySTNGkWM8Kqh1oxQpjuescUTKKDyjxgc-2FV-2FvZ-2B4DRx9QWk-2BkQ-2BjiMfURorit4JmkIXSr-2BPdv8O9TfftQmlYj2jS7pL3OwDRKCvgPsbTM7Mq4XYLW0-2BN7cepeeVkbqEkESO0BsC5ztc3OT9Qv36L1OqObI4X1ydOG6VLeemjtS52qITVc6Xk0sDDhUjrEuNFk0xTH8ut-2FU1aDMnmMUajp4C9miPf0C9WyemeGqWe1RM3gHkeQnLtR0VE7eydVNcnx251Eb-2FEan9JEMdSuAJQwxHUiLA0Ix7nDZ2NRF-2BIghKhJ2HWHiwikF6PFsVaBKaNIbsDWR7AlY1BCrTrZMRzRMAs6Zs2oPU-2F-2FSZbY8WwnHGMTKBN21MCt2-2FIa28-2BWxg3fHOANKnwmfmTZGgroVDsbMHllYZlFkqNLrXSZm2OPRe104WSxaO6WYQg8oeYAFTOEFPkVmRlp1Bc8C8vJYNKgUbFujoeqid0NxSXhpxkQN1ptMlo9ifU5vOc7VerRMQZfPrvt8hsOz7gHB3ArvEFuF4xPdbjOWiTJbVgOswPejo4-2BaxosUF7Mq5uREywiHTlYk91Vf-2BjHwiCPANMwPY-3D" target="_blank">Print or save</a></td></tr></tbody></table>
								</td></tr></tbody></table>

					<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">AVG Subscriptions<br>									(347) 480-1326<br>									renewals@avg-orders.com<br>									www.avg-orders.com</td></tr></tbody></table>

					<table><tbody><tr><td colspan="1" rowspan="1">If you receive an email that seems fraudulent, please check with the business owner before paying.</td></tr></tbody></table>
					<a href="http://links.notification.intuit.com/ls/click?upn=LEV65WI9EZ1l5TkUt4hKq8-2FVBbYuuj0nDg25Ut8MlRk7KabmTeKnCw6LVYtMSGH036LdJvE-2F7kxSEi1KXvACa12simZJeFWpXodkcmPOYOMea3n4-2FgS6wyIcvtwS2-2F4S6jpq_J9Rg-2FAHhivH-2BFetUhQP4aviKAxx8iO7yZpnU58koMNtjt1BTB-2FDxbbyQaOEJKZA2eCDsrBUsSqodPkzbFt-2FFFmNtfySTNGkWM8Kqh1oxQpjuescUTKKDyjxgc-2FV-2FvZ-2B4DRx9QWk-2BkQ-2BjiMfURorit4JmkIXSr-2BPdv8O9TfftQmlYj2jS7pL3OwDRKCvgPsbTM7Mq4XYLW0-2BN7cepeeVkbqEkESO0BsC5ztc3OT9Qv36L1OqObI4X1ydOG6VLeemjtS52qITVc6Xk0sDDhUjrEuNFk0xTH8ut-2FU1aDMnmMUajp4C9miPf0C9WyemeGqWe1RM3gHkeQnLtR0VE7eydVNcnx251Eb-2FEan9JEMdSuAJQwxHUiLA0Ix7nDZ2NRF-2BIghKhJ2HWHiwikF6PFsVaBKaNIbsDWR7AlY1BCrTrZMRzRMAs6Zs2oPU-2F-2FSZbY8WwnHGMTKBN21MCt2-2FIa28-2BWxg3fHOANKnwmfmTZGgroVDxAbIY7K6ijRs-2FFiS9MRuq9Xk9s-2FfHevUNAmuqVg1A1ce7tqSduwwNWCsdWzML7-2Bozsx-2FFLcLAsTugZKem1vMhYoCgXsEo9-2B7Wemd2dJq-2FXU1GqkSg-2BdNVraOr2s-2Fr844Xhq81rDPyFg-2BupCv-2B40Q0Ie0taRcsT-2Bm4I1wMI1SWhn2VxwMMZBZ9GPhn-2BtYlYnY-3D" target="_blank"><img src="https://ecp.yusercontent.com/mail?url=https%3A%2F%2Fplugin-qbo.intuit.com%2Fbrand%2F1.1.9%2Fproduct-specific-brand%2Fassets%2Fquickbooks-payments%2Flogos%2Fqbeinvoiceemail.png&amp;t=1658359311&amp;ymreqid=077befe2-96ea-7bfa-1cf5-730049018200&amp;sig=h74tANQnfSV0D3SNrMxUzw--~D"></img></a><br>						&copy; Intuit, Inc. All rights reserved.<br>						<a href="http://links.notification.intuit.com/ls/click?upn=LEV65WI9EZ1l5TkUt4hKqyNfdD7XsSyGjP-2FDmkGJ0tnq4AuWnklWqFBquYMugwypW_xD_J9Rg-2FAHhivH-2BFetUhQP4aviKAxx8iO7yZpnU58koMNtjt1BTB-2FDxbbyQaOEJKZA2eCDsrBUsSqodPkzbFt-2FFFmNtfySTNGkWM8Kqh1oxQpjuescUTKKDyjxgc-2FV-2FvZ-2B4DRx9QWk-2BkQ-2BjiMfURorit4JmkIXSr-2BPdv8O9TfftQmlYj2jS7pL3OwDRKCvgPsbTM7Mq4XYLW0-2BN7cepeeVkbqEkESO0BsC5ztc3OT9Qv36L1OqObI4X1ydOG6VLeemjtS52qITVc6Xk0sDDhUjrEuNFk0xTH8ut-2FU1aDMnmMUajp4C9miPf0C9WyemeGqWe1RM3gHkeQnLtR0VE7eydVNcnx251Eb-2FEan9JEMdSuAJQwxHUiLA0Ix7nDZ2NRF-2BIghKhJ2HWHiwikF6PFsVaBKaNIbsDWR7AlY1BCrTrZMRzRMAs6Zs2oPU-2F-2FSZbY8WwnHGMTKBN21MCt2-2FIa28-2BWxg3fHOANKnwmfmTZGgroVAs0G-2BQb-2FrKj8oxJvNvQhIDNRmkcGXSNyJpVWXZHV2vPE11ZkjWZ1WlGEuuXw5ZK-2F9SxRUm6nvxAPM52xUrZjwYw5LKoEMh8e4Xen-2BCW60stC2QwonNVytMLXcVmuxyrgJZDGcuMJjrfrq4rWMJnAItnyhN6yz8egmjm4qPWCmscA6nhU5OcqO-2BGeW3ctXxAXw-3D" target="_blank">Privacy</a> | <a href="http://links.notification.intuit.com/ls/click?upn=Wdp-2Bokx3FDF4PLntBJIh3afZMvmmLCoDYLeXSbsMjBMqIlLoawreFORQ356su6fIYrgl_J9Rg-2FAHhivH-2BFetUhQP4aviKAxx8iO7yZpnU58koMNtjt1BTB-2FDxbbyQaOEJKZA2eCDsrBUsSqodPkzbFt-2FFFmNtfySTNGkWM8Kqh1oxQpjuescUTKKDyjxgc-2FV-2FvZ-2B4DRx9QWk-2BkQ-2BjiMfURorit4JmkIXSr-2BPdv8O9TfftQmlYj2jS7pL3OwDRKCvgPsbTM7Mq4XYLW0-2BN7cepeeVkbqEkESO0BsC5ztc3OT9Qv36L1OqObI4X1ydOG6VLeemjtS52qITVc6Xk0sDDhUjrEuNFk0xTH8ut-2FU1aDMnmMUajp4C9miPf0C9WyemeGqWe1RM3gHkeQnLtR0VE7eydVNcnx251Eb-2FEan9JEMdSuAJQwxHUiLA0Ix7nDZ2NRF-2BIghKhJ2HWHiwikF6PFsVaBKaNIbsDWR7AlY1BCrTrZMRzRMAs6Zs2oPU-2F-2FSZbY8WwnHGMTKBN21MCt2-2FIa28-2BWxg3fHOANKnwmfmTZGgroVA-2BLHkckHzk2YCZV9XmBZk7VZxv9AGGXTB8Avnru-2BMUpNKRQ-2BDZ6GOpoYFYoSAxU38il9yrPyHWPTUSix83XdJleB4ofp34wHtf-2Fv-2Frn-2FLO8qWYzMaACekrrfVl61V4vRggQyVaQUjy32vYwBfCRtPpyKzPK4g62dU6pQYBV5D3036NmPIWrH77nlTKJtXhMJ4-3D" target="_blank">Security</a> | <a href="http://links.notification.intuit.com/ls/click?upn=LEV65WI9EZ1l5TkUt4hKqzq6J49VEXJMRhUxqRckK3XsGEz5CzONqmbdXoqv99YHUQEwOrv079jeYfbmOG9u7g-3D-3DIcxv_J9Rg-2FAHhivH-2BFetUhQP4aviKAxx8iO7yZpnU58koMNtjt1BTB-2FDxbbyQaOEJKZA2eCDsrBUsSqodPkzbFt-2FFFmNtfySTNGkWM8Kqh1oxQpjuescUTKKDyjxgc-2FV-2FvZ-2B4DRx9QWk-2BkQ-2BjiMfURorit4JmkIXSr-2BPdv8O9TfftQmlYj2jS7pL3OwDRKCvgPsbTM7Mq4XYLW0-2BN7cepeeVkbqEkESO0BsC5ztc3OT9Qv36L1OqObI4X1ydOG6VLeemjtS52qITVc6Xk0sDDhUjrEuNFk0xTH8ut-2FU1aDMnmMUajp4C9miPf0C9WyemeGqWe1RM3gHkeQnLtR0VE7eydVNcnx251Eb-2FEan9JEMdSuAJQwxHUiLA0Ix7nDZ2NRF-2BIghKhJ2HWHiwikF6PFsVaBKaNIbsDWR7AlY1BCrTrZMRzRMAs6Zs2oPU-2F-2FSZbY8WwnHGMTKBN21MCt2-2FIa28-2BWxg3fHOANKnwmfmTZGgroVDFLVslXiGQBo32Bja4iVmJ7mJTfYAdtvBPHRsugf2Zw4kVATQ2v8EeHShOkSA3TnlAv3UmnwUztZP6kNcP1y0wimhmljZHyh72yeNpV8wH7autZsEI-2Fgouv1E6E7ECKWJxuilF8WJLyDPxMBTsRx0mBTOiwE02IQNEW6nllc6iTsgSAhn6qOlrn2oYrN1p098-3D" target="_blank">Terms of Service</a></td></tr></tbody></table>
		</td><td colspan="1" rowspan="1"> </td></tr></tbody></table>
4

Ugh, apologies for the typos. Typing on my phone.

5

This is also a scam correct? We didn't buy nor subscribe to anything…
AvG 880 Advance Care+
Email informing us that we renewed AvG care+

6

Diane,

Has anyone reached back out to you about this? Today (July 26th) I received a similar email with an invoice for over $300.

7

Hi Morgan,

We're glad to look into this & help you.
Please write back to us in your own post to proceed further.
Thank you in advance!

2

Thank you for the quick response.  I will await an answer.