Warning! Fake Emails Impersonating Bitdefender Renewal Orders

A new email scam is circulating in which attackers impersonate the cybersecurity company Bitdefender. The emails are being sent to people who are not Bitdefender customers, attempting to trick recipients into believing their security subscription has been renewed and charged.

Fake email: Your order has been finalized

This message is fraudulent and not a legitimate communication from Bitdefender.


What the Scam Email Looks Like

Victims report receiving an email with the subject line:

Your Order Has Been Finalized

The message claims that a Bitdefender Total Security plan has been renewed for four years, charging the recipient several hundred dollars. The email typically includes fake details such as:

  • A renewal date
  • A membership ID and customer ID
  • A transaction confirmation
  • A product name like QuantumDefense
  • A customer support number starting with +1 (810)
  • A request to contact “support” if the recipient did not authorize the charge

The email may also attempt to create or attach a calendar invite, which is intended to make the message look more legitimate or encourage interaction.


Warning Signs of the Scam

Several red flags clearly indicate the message is fraudulent:

  • You receive it despite not being a Bitdefender customer
  • It claims a large charge (e.g. $397, $536.55) designed to create panic
  • The email contains customer support phone numbers beginning with +1 (810) the rest of the number may vary
  • The message includes generic or fabricated transaction information
  • It attempts to trick recipients into accepting a calendar invite
  • The contact information and address are fake or unrelated to Bitdefender

Bitdefender does not include customer support phone numbers in subscription renewal emails. Scammers use the phone number to perform a refund scam, where victims are pressured into calling and then manipulated into providing payment information, remote computer access, or banking details.


What You Should Do If You Receive This Email

If you receive this message:

  1. Do not call the phone number provided
  2. Do not accept any calendar invitations
  3. Do not reply to the email
  4. Block the sender
  5. Delete the fake email titled “Your Order Has Been Finalized”

Interacting with the email even by replying can confirm to scammers that your address is active.


How to Verify Legitimate Bitdefender Messages

Whether or not you are a Bitdefender customer and want to check a renewal:

Never rely on phone numbers or links included in suspicious emails.

Legitimate companies will never pressure you to urgently call a random phone number about a charge you don’t recognize. When in doubt, don’t interact. Delete it.