McAfee Renewal Scam
Two days running I received this e-mail. I don't use McAfee but this isn't a genuine e-mail sent in error by McAfee but an e-mail sent by scammers.
E-Mails received:
Date: 21/03/2025, 04:14
From: Membership Service info@agilitime.com
To: [Name and E-Mail address redacted]
Subject: Invoice #881997 From MCF Support Team!
Notes
Senders e-mail: info@agilitime.com nothing to do with the genuine McAfee website which is https://www.mcafee.com/
Link address again goes nowhere near McAfee the link will take you to http://gummies.kyleconstance.com/4Vplkr163uCoB17ktekoxczyi432OLJXDMUJNUJMORP2901693
DWMI226T4, a website address not connected in any way with the real McAfee website. They are out to scam you and that's whether you use McAfee or not.
Recommendation:
Just delete the e-mail.
A few days later I received another e-mail from someone else trying to scam me.
Date: 26/03/2025, 12:39
From: Membership Service info@agilitime.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Update: You will lose your device within 48 hours!
Notes
Again the sender e-mail address was info@agilitime.com
Link address again goes nowhere near McAfee the link will take you to http://graf.1109121.ru/4acXzh199ITIV17rspudcucgb432HUTXZRIHA
OOOTCA2901693IBPU226I4, a Russian website address not connected in any way with the real McAfee website. They are out to scam you and that's whether you use McAfee or not.
There is also an unsubscribe link which will take you to http://graf.1109121.ru/1xVmgG199RQab17xnldstqwkx432RCYXOLLOTFPAEHG2901693NHTB226V4. again the same Russian website. McAfee do not operate out of Russia. Do not click on any links.
This time they are telling me that my subscription has ended and dire consequences will occur. I will live with that.
Recommendation:
Just delete the e-mail.
And another e-mail.
Date: 10/04/2025, 06:48
From: Warning info@kwszaad.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Your membership has been suspended
Notes
The sender e-mail address is unlikely to be one belonging to McAfee info@kwszaad.com
Link address again goes nowhere near McAfee the link will take you to http://plan.ignorelist.com/4smZqh509xnSt17acnbnqnmpd432JLKIOCGEDPNWGBX2901693NIML286n5, a website address not likely to be connected in any way with the real McAfee website. They are out to scam you and that's whether you use McAfee or not.
The unsubscribe link takes you to the same website address. Do not click on any links.
Recommendation:
Just delete the e-mail.
And another e-mail.
Date: 13/04/2025, 23:15
From: SECURITY DISABLED info@miegwen.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Your device is currently vulnerable to attacks
Notes
This e-mail looks very official, the wording Security Alert, Critical, Security Disabled and Final Warning all to encourage you to click on the Activate button before you have checked out the authenticity of the e-mail.
Sender E-mail address: info@miegwen.com, nothing to do with McAfee. Miegwen.com is a French language website concerned with perfumes, nothing to do with internet security.
The Activate button link would take you to... http://plan.ignorelist.com/4wKCSk650ZpPm17ebrtegdxfc432LUPWPXREEBBWHSO2901693LWEE286m5 clearly nothing to do with the official McAfee website.
Recommendation:
Just delete the e-mail.
And another e-mail.
Date: 02/05/2025, 14:20
From: MCF Support Team sales-McAfee@vanestransport.com
Reply to: reply@inbox.dournaux.com
To: [Name and E-Mail address redacted]
Subject: Re: Your membership is over!
Notes: From and Reply to addresses bear no resemblance to a genuine McAfee e-mail address. The click button links to http://btre.rohl.nom.za/4hrfzZ1200hlpD17ffcdmszjxu432JDDVBCIEJVXODDY2901693TAFQ416X4 which appears to be a South African E-Mail Marketing Agency. Whether they know they are connected with a scam or not.
Recommendation:
Just delete the e-mail.
And yet another e-mail.
Date: 02/05/2025, 21:58
From: Safety first! mcafee@miegwen.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Your antivirus subscription has expired!
Notes: We have received scam e-mails from this address before. "Renew Now" link goes to
http://myclick.ignorelist.com/4XSzyj1206HhIQ17dcjuwmnzkg432DMHVFMUQHM
XJBQJ2901693GXSZ285z5 nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
And another email...
Date: 09/05/2025, 14:06
From: MĀ¢Afee notification@wipro-unza.co.id
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Critical [S]ecurity AIert: Protect Your Devices lmmediately 141
Notes: A different email address than before, this time from Indonesia. "Renew Now" link goes to http://mail.moosaid.com/o3SlrAkwTY/offer/
0029n/631/d8mgu/2fhw/41/77/?signature=k1mKlTwliO2iNWGZghuJ6FqGdn3lNdEX5QyhAUsIzlRd8n2fvn nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
And there's more (Jimmy Cricket)...
Date: 11/05/2025, 17:34
From: Account deleted mcafee@miegwen.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** All files will be deleted today
Notes: We have received scam e-mails from this address before. "Renew Subscription" link goes to
http://myclick.ignorelist.com/4ZgYyB1317NjlW17sgtzfyxttp432CDKYNSXKBVBGHPT2901693JABY285V5 nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
And another...
Date: 11/05/2025, 17:34
From: Account deleted sales-McAfee@vanestransport.com
Reply to: reply@inbox.dournaux.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Bill #435370 From MCF Support Team!!
Notes: We have received scam e-mails from this address before. "Enable Automatic Renewal" link goes to
http://btre.rohl.nom.za/4crdJd1324hKle64ktesivvvwd432PMEFLVOFUAQWPNP2901693HKGC416q4 nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
They don't give up...
Date: 20/05/2025, 13:16
From: Account deleted mcafee@speedrack.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Bill #866786 From MCF Support Team!!!
Notes: A different sender email address, the domain was registered many years ago but does not have a website on the domain. I apparently have 631 dangerous viruses... scare tactics. The click through link goes to http://btre.rohl.nom.za/4UskUk1446Egzp34iwniaxqjwq432USIXJIWJSCLLYJG2901693LPBG282e4 nothing to do with McAfee
Recommendation:
Just delete the e-mail.
They don't give up...
Date: 22/05/2025, 14:23
From: MCF Support Team mcafee@speedrack.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Your membership is over!
Notes:Same sender e-mail address. The click through link goes to http://193.187.175.80.sslip.io/4rSlay1489XJFb34dikzkcuqgg432LWMRQVBVCHLWGPS2901693SPIY283r4, a different link address .io domain, nothing to do with McAfee
Recommendation:
Just delete the e-mail.
I wish they were permanently deactivate my account!
Date: 03/06/2025, 04:39
From: Protection Center support@zehncloud.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** mfowler,Last Notice Mon, 02 Jun-2025
Notes:Have not seen the sender e-mail address before. Relatively new domain name registration, but no website displayed. The click through link goes to https://mail.moosaid.com/f/r/0029n338d8mgu41772gdl~~/XASLFWH~/YZaJmTVxuQmTL
BvrysRakAZgCLCMDSNCROmdHhAcXNVJoraMKRNVsMbUyEHb-PPQvEojQrRYSTWGPF
UhFHRwvNPiPJGurIQMmfVdwMbpGXVwCQDQAAAAA.
We have had a moosaid.com link before, but again nothing to do with McAfee
Recommendation:
Just delete the e-mail.
More McAfee emails received >>
Other articles by Michael Fowler:
Amazon Shipment Update Scam - Michael Fowler
I received four Amazon shipping update scams in quick succession. How do I know they are scams? First I do not have an Amazon account or buy anything through Amazon but if I did just follow the simple rules...
more >>
DHL Shipment Update Scam - Michael Fowler
I received the following e-mail supposedly referring to a DHL shipment en-route to me. I have no expectation that any shipment is en-route to me from DHL or any other carrier...
more >>
Vera Elasquez - Content Researcher and Freelance Journalist - Michael Fowler
This lady found my writing "exceptionally insightful. Your writing is not just informative, but truly illuminating on the subject. The clarity and depth of your research are remarkable"...
more >>
Government Gateway Phishing Scam - Michael Fowler
You can imagine the havoc and harm that can be inflicted if someone manages to trick you by a phishing e-mail redirecting you to a fake login page whereby you unknowingly reveal your username and password details...
more >>
