Do not call the number or open the attachment in an unexpected Geek Squad email scam. Check your bank or card account independently, then reach Best Buy or Geek Squad through BestBuy.com or another contact route you already trust.
Geek Squad and Best Buy are legitimate businesses. Scammers impersonate them with fake renewals, invoices, cancellation numbers, and refund stories.
Short answer
A large "automatic renewal" amount and a short deadline are meant to make you call before checking. Do not use the message's number. Look for the charge in your real bank account and review any Best Buy membership through the official site or app.
How the fake Geek Squad invoice works
The FTC's Geek Squad renewal warning describes the classic lure: an email or text says hundreds of dollars were or will be charged to renew a membership. To cancel or dispute it, the reader must call within 24 hours.
The supposed invoice may be plain text, an image, or a PDF. The amount is often large enough to be alarming but plausible enough to make the reader wonder whether they forgot a subscription.
The phone call is the dangerous step. The FTC says the caller may request remote access, steal online-banking credentials, or stage a fake refund that ends with a gift-card demand.
Is this Geek Squad email real?
No single visual detail proves that a message is genuine. Check the underlying account and charge.
| Check | Safer evidence | Scam warning |
|---|---|---|
| Subscription | Appears in the Best Buy account you opened directly | Message is the only evidence it exists |
| Charge | Appears on the bank's official app or statement | Invoice claims payment but bank shows nothing |
| Phone number | Found independently on BestBuy.com | Printed in the email, PDF, pop-up, or text |
| Cancellation | Handled through a known account or official support | Must call immediately to stop a large charge |
| Payment | Normal documented billing method | Gift card, crypto, wire, or "temporary refund" transfer |
| Device access | Support relationship you initiated and verified | Unsolicited request to install remote-access software |
Best Buy's official fraud guidance says unexpected calls claiming to be from Best Buy or Geek Squad should be treated with suspicion. It recommends contacting the company through a publicly available support route rather than a number supplied by the caller or message.
What to do before calling, clicking, or paying
- Do not call the number in the email or attached invoice.
- Do not reply, click "Cancel," or use a QR code.
- Open your bank or card app and look for the actual charge.
- Sign in to Best Buy by entering the address yourself.
- Check your memberships, orders, and appointments.
- If you still need help, use the support route shown on BestBuy.com.
- Report the message as phishing.
If a link is present, check the destination without clicking. The words "Best Buy" elsewhere in the URL do not make its registered domain legitimate.
What about the PDF invoice?
A PDF attachment is not proof that a charge exists. It may simply be a document designed to display the fake amount and phone number. Other attachments can contain harmful links or exploit attempts.
Do not open an unexpected invoice to find out what it says. Check your bank first. If you already opened it, do not panic. Opening a PDF does not automatically mean malware was installed. Follow our guide to check an email attachment safely, update trusted security software, and scan the device if the file behaved unexpectedly or triggered a download.
What to do if you already interacted
You called but shared nothing
End the call and block further contact. Do not install software they send later. Check the bank and Best Buy account independently.
You gave remote access
- Disconnect the computer from the internet.
- End the remote-access session and remove software you were instructed to install.
- Use a trusted security professional or your organization's IT team.
- From a clean device, change passwords for email, banking, and other accounts you accessed during the session.
- Review bank activity and contact the financial institutions.
You shared a password or verification code
Change the affected password from the genuine site, sign out other sessions, review recovery methods, and turn on multifactor authentication. Secure the email account first if it can reset other accounts.
You paid or bought gift cards
Contact the bank, card issuer, payment app, wire service, or gift-card company immediately. Ask whether the payment can be stopped or traced. Do not pay a second person who promises to recover the money.
You saw a real unauthorized charge
Report it to the bank or card issuer using the number on the card or official app. Then contact Best Buy independently. A real charge does not make the email's phone number safe.
The same renewal lure can arrive by text. After securing your accounts, see how to block scam texts and emails on iPhone.
How to report a fake Geek Squad renewal
- Best Buy asks people to send suspected Best Buy or Geek Squad scams to
abuse@BestBuy.com. - Use your email provider's Report phishing option.
- Report the fraud to the FTC at ReportFraud.ftc.gov.
- Report major cyber-enabled theft to the FBI's IC3.
- Contact the bank or payment provider when money or account information is involved.
Do not republish the scammer's phone number as a warning. Numbers are disposable, can be spoofed, and may later belong to an unrelated person.
Frequently asked questions
What if the amount in the email is a real charge?
Contact the bank and Best Buy through independent channels. Do not call the number in the email merely because the amount matches.
Should I call the number to cancel the Geek Squad renewal?
No. Use a contact method you found on BestBuy.com or in an account you opened directly.
What if I opened the PDF invoice?
Opening it does not automatically mean the device was infected. Do not click links or call its number. Update security software and scan the device if it downloaded anything or behaved unexpectedly.
Can a fake Geek Squad email arrive from Gmail or another free address?
Yes, but the sender domain is only one check. A compromised business account can also send phishing. Verify the subscription and charge independently.
Can Rampart tell whether I owe Geek Squad money?
No. Rampart can warn about suspicious SMS and connected email patterns, but it is not connected to Best Buy's billing or membership systems.
The safest next step
Check the bank first, then open Best Buy independently. If there is no charge and no expected membership, report the message instead of calling it.
Rampart is available for iPhone if you want another warning layer for suspicious SMS and connected Gmail or Outlook messages. Learn how Rampart filters scam texts and emails or download it from the App Store.