Norton Refund Scam 804 430 6866

Scam Number: 804 430 6866
Scammer’s Website or Email: text
Additional information about this scam: Billing Alert: Your Subscription Has been Successfully Reactivated of Norton_Plus. Total Charge: 417.50 USD. If this isn’t you , reach us +1 804 430 6866

bhenchod answers as kevin, still answering as of 20:24 30/3/2026 UK Time

8044306866 Kevin

Carrier: Microsoft Teams
Call Center Location: India :india:
Answers as: “Norton”
Technician: “Kevin”
Supervisor: “John”
Falsely Claims:

  • I signed up for a Norton free trial under my phone number.
  • I need to “connect” to the “Norton secure server”
  • I need to receive a “refund link” in my email, though the scam originated from a text.

Remote Access Software: UltraViewer (ID: 201610912/DESKTOP-QAR1VTS)

image

Once remotely connected to my virtual machine, “Kevin” asked for me to check my emails for anything from Norton, so I responded by telling him I had an iCloud email, and he asked for said email so I can receive the link in it, which I refused to provide.

  • I was then asked to fill out a “Norton refund form” and log into my nonexistent bank account. But since I don’t do online banking, I was asked to search for my fake bank on Google so they can “verify” if I received the refund or not.
  • I was then asked to call my bank to verify if I got the money or not, which I refused to do so on the grounds that they closed for the day, so I was instead asked to provide my card number over the phone, which I then refused to do so on the grounds my bank will freeze my account.
  • When I asked for a “secure web portal,” “Kevin” asked for me to wire money through Western Union, PayPal, Moneygram or purchasing Target or Walmart gift cards. I refused to do either, so he transferred the call to his braindead supervisor, “John,” who wanted me to provide my card details on notepad or the browser extension thoughtpad.
  • “John” then questioned me on why I wasn’t using Google Chrome before once again trying to get me to provide card details on “thoughtpad” before refusing to “suppoat”