Antivirus ghosts: kill the renewal that turns $49.99 into $124.99
A 13-month audit for finding forgotten Norton, McAfee, Bitdefender, Malwarebytes and Avast security-suite charges, seeing the renewal price before it posts, cancelling on the rail that owns the billing record, and turning auto-renewal off before the next one.
An antivirus renewal is a subscription you stop thinking about and keep paying for. Norton 360 Deluxe sells for $49.99 for the first year, and the same product page measures that discount "compared to the renewal price of $124.99/year." 1 Avast's store prints both figures side by side: Premium Security at $49.08 for the first year against a renewal price of $77.99/year, and Ultimate at $49.08 for the first year against $109.99/year. 2
The rest of the category repeats that shape. CNET's antivirus review, published August 20, 2026, prices Bitdefender Antivirus Plus at $25 for the first year renewing at $50, Total Security at $60 renewing at $110, and Ultimate Security Plus at $120 renewing at $190. Norton 360 Deluxe runs $50 in the first year and $125 after, and Norton 360 with LifeLock Ultimate Plus $300 and then $365. McAfee's individual plans span $30 to $150 in the first year and $90 to $280 a year afterwards, with McAfee Plus Advanced at $100 for the first year and $200 after. 3 Malwarebytes splits the difference: Standard for three devices is $60 a year with no first-year discount, while Ultimate is $140 for the first year and $280 after. 3
The threat these charges are sold against is real, and the category's own survey measures it. YouGov asked 2,539 US adults for CNET between March 18 and 20, 2026, of whom 1,989 owned a personal laptop; 54% of the laptop owners had run into potential malware in the previous 12 months, 37% had received phishing emails, and 88% of those who saw something suspicious took action. 4 The same article carries the fact that decides most renewals: Windows 11 includes Microsoft Defender, Macs include XProtect, Gatekeeper and the Malware Removal tool, and CNET's testers say a second antivirus program is not automatically necessary on a machine that already has one. 4
The forgetting is not a security-software problem. CNET's 2026 State of Subscriptions survey, run by YouGov across 2,522 US adults between April 29 and May 1, 2026, put average subscription spending at $111 a month and the money wasted on unused subscriptions at $21 a month, or $252 a year, up from $17 a month in 2025. 5 C+R Research's 2022 survey of 1,000 US consumers measured the same blind spot from underneath: respondents estimated $86 a month and then itemized $219. Seventy-four percent said recurring charges were easy to forget, 42% had paid for a service they had stopped using, and 72% had set their subscriptions to auto-pay. 6
Why a security-suite charge outlives your attention
The subscription can be created at a purchase you no longer remember. Norton lists three routes into an automatically renewing subscription: buying directly, pre-paying at a retail or e-commerce outlet, and activating renewal inside an account. A card bought at a store becomes a recurring subscription once it is registered online and billing details are saved to the account. 7 A charge labelled "Norton Annual Renewal" therefore records an enrollment made at an earlier purchase. 8
A new computer can do the enrolling instead. Dell's support article on McAfee subscriptions states that McAfee products bought from Dell are sold either as a Standard subscription or with Auto-Renewal, and that Auto-Renewal applies to McAfee LiveSafe purchased with a Dell computer. Those notices go to the email address tied to the product, within 60 days of the expiration date. 9
The renewal price is a second price, printed quietly. Norton presents $49.99 as a 60% discount and names $124.99/year as the renewal price that discount is measured against. 1 Avast prints "Savings compared to renewal price $77.99/year" underneath the first-year figure. 2 Bitdefender's own help page states that "90% of Bitdefender customers choose to keep the Auto-Renewal plan", which is the vendor's account of how the second price gets paid. 10
The renewal notice arrives, and a notice is not a decision. Bitdefender emails 45 days before the expiration date with the renewal details and a link for cancelling the service. 10 Malwarebytes emails yearly subscribers a renewal reminder 30 days before the renewal date that includes the amount about to be charged. 11 Norton emails the renewal price and the billing date before an annual charge. 7 Each of those messages is a deadline wearing the clothes of a receipt.
The app and the subscription are two different objects. Malwarebytes states that a cancelled subscription "remains active and valid until its expiration date", so the software keeps running whether or not you uninstall it. 11 Google Play tells subscribers the same thing in one line: uninstalling an app does not cancel the subscription. 12 Avast describes the state after a renewal is cancelled — the status changes to Expiring, the paid product keeps working until its expiration date, and the account then loses access or drops to the free version. 13 Norton separates the two acts outright: turning off the renewal stops the billing, while cancelling the contract and requesting a refund requires uninstalling and deleting every copy of the software first. 14
One account can hold several subscriptions with one-way links between them. Norton's policy says cancelling the renewal of a main subscription also cancels the renewals of the add-on subscriptions linked to it, while cancelling an add-on leaves the main subscription renewing on schedule. 14 Avast asks subscribers to repeat the cancellation for every subscription listed in the account. 13 Bitdefender keeps two different cancellation screens depending on which payment processor holds the payment, plus a separate store account for the processor itself. 10
Find the charge before you cancel anything
Search 13 months of every bank and credit-card statement. An annual security renewal hides between the monthly reviews, and its amount usually sits in the same band as a streaming bill. Use these terms as a net:
NORTON
NORTON ANNUAL RENEWAL
SYMANTEC
MCAFEE
BITDEFENDER
2CO.COM
2CHECKOUT
VERIFONE
MALWAREBYTES
AVAST
AVG
GEN DIGITAL
APPLE.COM/BILL
GOOGLE PLAY
PAYPALYour own statement descriptor governs. Norton documents "Norton Annual Renewal" as the label on its renewal charge. 8 A McAfee subscription that came with a computer can be billed by the seller rather than by the software company, which is why the retailer's name belongs in the search. 9 2Checkout, now Verifone, is the authorized vendor for Bitdefender products purchased online, so a Bitdefender charge can post under that name. 10 Avast, AVG, CCleaner and HMA share one cancellation policy and one parent company, Gen Digital, whose name stands in the Avast site footer. 1315
Search the inbox in the same sitting, because the receipt names the email address that owns the account:
renewal reminder
renewal price
your subscription renews
pre-billing notification
automatic renewal
order confirmation
product key
serial number
receipt from Apple
Google Play receipt
PayPal receiptRecord one row for every hit before you open a cancellation screen:
| Field | Record this | Why it matters |
|---|---|---|
| Statement identity | Descriptor, amount, posted date, card last four | Separates two charges with similar names |
| Receipt identity | Sender, receipt date, order number, renewal price | Ties the charge to one product |
| Account identity | Sign-in email and the email used at purchase | The account may not be the one you still read |
| Billing owner | Vendor account, retailer, Apple, Google Play, PayPal | Chooses the cancellation door |
| Renewal state | Next charge date, term end, renewal price, auto-renewal on or off | Tells you what still has permission to charge |
| Final proof | Screenshot, confirmation email, case number, date | Your record if another charge posts |
The receipt-owner test. Match five fields before you cancel: the statement descriptor, the receipt email, the vendor account, the payment card's last four, and the next renewal date. A matching product name on its own can leave a second subscription running — a licence registered under a different email, a store purchase on another Apple account, or a bundle billed by the retailer that sold you the computer.
Cancel it, vendor by vendor
Norton
- Sign in to your Norton account at my.norton.com and open the My Subscriptions tab.
- Find the subscription and click Cancel Subscription Renewal, or Manage Renewal.
- Next to Plan Renewal, click Unsubscribe.
- Select a reason and click Next. Norton says it "may present options and offers to encourage you to keep your subscription."
- Click No thanks, cancel my subscription, then Next. A confirmation message appears, and the change can take up to 24 hours to show. A confirmation email follows within 24 to 48 hours. 16
The trap is that two different things live behind those buttons. Turning off the renewal keeps the licence running to the end of the term you already paid and refunds nothing. A refund is a separate contract cancellation under Norton's policy: annual subscriptions carry a 60-day money-back guarantee covering both the purchase and each later annual charge, while monthly subscriptions are refundable for 14 days from the purchase and later monthly charges are not refundable at all. You need an order number, a product serial number or a product key to claim it. 14
Use this counter-script for a renewal that already posted:
I am asking you to cancel the subscription contract for [product] billed to [email] and to refund the renewal charged on [date] for [amount] under the annual 60-day money-back guarantee. Please confirm the cancellation, the refund amount, and the date the refund will be issued, by email, with a case number.
McAfee
Two companies can hold this billing record, and the account you sign in to follows the seller.
- For a subscription bought directly from McAfee: sign in at mcafee.com, open Account, then Auto-Renewal Settings, and turn the auto-renewal subscription off. To renew manually instead, the same account lists products under Account then Subscriptions. 9
- For an auto-renewal subscription bought with a computer from Dell: sign in at dell.com/support/software, open the Products tab, select the product, click Manage my subscription, turn off automatic renewal, and click Save. 9
The trap is the seller. A McAfee subscription that arrived with a laptop may never appear in a McAfee account, and the vendor's notice for it goes to the email attached to the product rather than to the account you use for your email. 9 When the account is out of reach, McAfee's consumer line is 866-622-3911, open 24 hours a day; GetHuman's documented route into the phone menu is to press #3, and it records an average hold of 3 minutes 42 seconds. 17
The charge on [date] is for a McAfee subscription that came with a computer bought from [seller]. Please confirm which company holds the billing record, turn off automatic renewal, and tell me whether the enrollment can be cancelled and the charge refunded.
Bitdefender
- Sign in at central.bitdefender.com and open My Subscriptions.
- If the account shows a My Payments tab: click View details beside the product, then Manage your subscription renewal options, then End Auto-Renewal. If the purchase email differs from the account email, Bitdefender sends a verification code to the purchase email first.
- If the account shows a Subscriptions tab instead: click the [ ••• ] button next to the subscription, choose Subscription & Continuous Protection, click Cancel Subscription, then choose Cancel at the end of subscription term or Cancel immediately.
- Select a reason and confirm. The status updates immediately and a confirmation email follows. 10
If neither tab is available, the payment was probably taken by the processor rather than by Bitdefender. Go to store.bitdefender.com/myaccount, request an access link by entering the purchase email address, open the link within one hour, then open My Products and click Stop automatic subscription renewal, confirming twice. 10
One choice inside that flow matters. Cancel immediately disables auto-renewal, ends the subscription and produces a refund, while Cancel at the end of subscription term leaves the paid term running to its end date. 10 Bitdefender's 30-day money-back guarantee covers orders placed through its own website; a purchase from another seller has to be refunded by that seller. Bitdefender's own refund page also states that a chargeback filed with a bank or PayPal can take three to four months to resolve and asks customers to contact the company first. 18
Please stop the renewal for [product] before [date] and confirm the state of the subscription by email. If the payment record sits with 2Checkout or Verifone rather than in my Bitdefender account, send the access link and tell me which email address it will go to.
Malwarebytes
- Sign in at my.malwarebytes.com and open the payment page for the subscription.
- Click Turn auto-renewal off.
- Select a reason for cancelling and click Send. A confirmation email follows. 11
The trap is on mobile. A subscription bought on an iPhone, iPad or Android device can only be cancelled through Apple or Google Play; the Malwarebytes account cannot stop it, and the help article sends readers to the two store pages. 11 Subscriptions bought from the Malwarebytes online store arrive with auto-renewal switched on by default, so a one-off licence and a renewing subscription look identical until the reminder email lands 30 days before the charge. 11 The pricing page states a 60-day money-back guarantee and free customer support. 19
Turn off auto-renewal for [product] on the account registered to [email], email me the confirmation, and confirm whether this subscription is billed directly by Malwarebytes or through the Apple or Google store.
Avast, and the same account for AVG
- Sign in at id.avast.com and click Manage subscriptions on the My subscriptions tile.
- Under the subscription, click Manage subscription, then Unsubscribe or Cancel renewal.
- Review the details and click Confirm & finish. The reason step is optional; when the cancellation completes, the status reads Expiring.
- Repeat steps 2 and 3 for every subscription in the account. 13
The trap is that Avast is running two account interfaces at once. Its help pages say the portal is being released in phases, so the page you see may not match the article you opened, and a second article covers the newer interface. If the subscription does not appear in My Subscriptions at all, the account is not the one that holds it, and Avast's own fallback is to add the missing subscription to the account by its purchase email address, or to use its alternative cancellation methods. 13 Refunds run on one policy covering Avast, AVG, CCleaner and HMA: annual subscriptions carry a 30-day money-back guarantee that also covers each later annual charge, while monthly subscriptions are refundable within 14 days of the purchase only. 15
Cancel the renewal for [product] on the account registered to [email] and confirm the status shows Expiring. If the subscription is not listed under that email address, tell me which address holds it and how to add it to my account.
When the account email is gone
Reaching a person by phone is a legitimate route, and it needs the same preparation: the charge date and amount, the last four digits of the card, and any order number on the receipt. GetHuman documents Norton's consumer line at 800-927-3991, open 24 hours a day with an average hold of 8 minutes 40 seconds, and a second number, 800-745-6061, described as its Member Services line routed to the cancellation and renewal department. 20 McAfee's number is 866-622-3911. 17
When Apple, Google Play, or PayPal owns the charge
Each of these three rails answers only for charges it processed. Stopping a payment there leaves a subscription the vendor bills directly untouched, and cancelling at the vendor leaves a store charge running. The store list is also the fastest way to find a security app you forgot you subscribed to on a phone.
Apple: open Settings → your name → Subscriptions → the subscription → Cancel Subscription. If there is no Cancel button, or a red expiration message appears, Apple says the subscription is already canceled. On the web, use account.apple.com. A family member's Apple account has to cancel its own subscription. 21
Google Play: open subscriptions in Google Play, select the item and tap Cancel subscription. Google Play describes subscriptions as running for an indefinite term, charged at the start of each billing cycle until you unsubscribe, and it states in bold that uninstalling the app does not cancel the subscription. Google Play also lists a pause among the options it puts alongside cancellation. 12
PayPal: open Settings → Payments, then Subscriptions and saved businesses or Automatic Payments, select the merchant and cancel the automatic payment. That record also carries the merchant's contact information, which is the route to use when the vendor's own subscription needs closing as well. 22
My statement shows [descriptor] on [date] for [amount]. Confirm whether this charge was billed by your store or by the vendor directly, and give me the subscription's next renewal date. I need the cancellation on the platform that owns the billing record.
Across all three rails the same four patterns recur: a discount offered before the confirmation screen finishes, a pause or downgrade presented as a cancellation, a scheduled change that takes effect only at the end of the cycle, and the belief that deleting an app ends the charge.
If a charge already posted
Build the packet before you escalate: statement, receipt, the account email, the renewal terms, your cancellation request, the final status screen and any case number. A payment reversal on its own can leave the subscription open.
For a debit from a bank account, the Consumer Financial Protection Bureau's instruction is to call the company and revoke permission, follow up in writing, then call the bank or credit union and follow up in writing there too; some banks also offer a stop-payment order, which usually carries a fee. The bureau states directly that stopping an automatic payment leaves the underlying contract in place, so the vendor cancellation has to happen as well. 23
For a card charge, call the card company promptly and send a written billing-error notice within 60 calendar days after the charge appeared on the statement, keeping copies and a record of the dates of every call. 24
Two legal points are worth having in hand when a vendor pushes back. Federal law makes it unlawful to charge a consumer for goods or services sold online through a negative option feature unless the seller clearly and conspicuously discloses all material terms before taking billing information, obtains the consumer's express informed consent before charging, and provides simple mechanisms for stopping recurring charges. 25 The FTC's amended Negative Option Rule, which would have gone further than that statute, was vacated by the Eighth Circuit on July 8, 2025 on the ground that the Commission had skipped a required preliminary regulatory analysis; the rule now sits at 16 CFR Part 425, and in March 2026 the FTC opened a new rulemaking on it, taking comments through April 13, 2026. 2627
The auto-renewal kill at purchase
The next charge is cheaper to stop than the last one is to recover. Every vendor here publishes a route to turn auto-renewal off, and turning it off does not shorten the term you have already paid for.
- Turn auto-renewal off the day you buy, not the month it renews. The routes above take two minutes at the moment when you still have the order number in front of you. 1116
- If you buy a key card at a store, or the software came on the computer, register the key without storing a payment method. Norton's own page explains that a pre-paid retail subscription turns into a renewing one once billing details are saved in the account. 7 Where a seller requires a card for the bundle, that card is the lever you have left.
- Give each security vendor its own merchant-locked virtual card with a spending cap set below the renewal price. Privacy.com documents merchant locking, spend limits, pause and close. A declined charge is a notice that never reaches a spam folder, and it works alongside the vendor cancellation rather than replacing it. 28
- Calendar the notice window, not the renewal date. Bitdefender writes 45 days out, Malwarebytes 30 days, Dell's notices for bundled McAfee run within 60 days of expiration, and Norton's pre-billing email precedes an annual charge. 91011 The earliest one of those dates is the day the decision is due.
- Keep four things in the same note as the licence: the order number, the product key or serial number, the email address used to buy, and the email address that owns the account. Norton's refund request requires one of order number, serial number or product key. 14
- Count devices and seats. Norton 360 Deluxe covers five, Malwarebytes' family plans reach 20 devices, and Bitdefender's family plans cover 25. 13 Two suites running on one machine is one suite too many, and a small business paying per device needs the seat count checked at the same time as the renewal date.
Close the reminder only after answering four questions:
- Can you still sign in to the email address that owns the subscription?
- Does the vendor account show the renewal as off, with the paid term still running to its end date?
- Does the plan bundle something else you already pay for separately — identity monitoring, a VPN, cloud storage?
- Do you know the renewal price you are declining, in dollars?
The kill list
- Search 13 months of statements for
NORTON,NORTON ANNUAL RENEWAL,MCAFEE,BITDEFENDER,2CO.COM,MALWAREBYTES,AVAST,AVG,GEN DIGITAL, plus the store and PayPal descriptors. - Search the inbox for renewal reminders, pre-billing notices, order confirmations and product keys, then record the account email the receipts name.
- Match five fields before cancelling: descriptor, receipt email, vendor account, card last four, next renewal date.
- Norton: My Account → My Subscriptions → Cancel Subscription Renewal → Unsubscribe → No thanks, cancel my subscription. Annual charges have a 60-day money-back guarantee; monthly ones 14 days.
- McAfee: sign in at mcafee.com → Account → Auto-Renewal Settings, or manage it at the seller if the suite came with the computer. Phone 866-622-3911, press #3.
- Bitdefender: My Subscriptions → My Payments → End Auto-Renewal, or the Subscriptions tab → Cancel Subscription, or the 2Checkout/Verifone store account. Refunds run 30 days on website orders.
- Malwarebytes: my.malwarebytes.com → turn auto-renewal off. App-store subscriptions must be cancelled at the store.
- Avast and AVG: id.avast.com → Manage subscriptions → Manage subscription → Unsubscribe. Repeat for each subscription. Annual charges have a 30-day money-back guarantee.
- Apple, Google Play and PayPal charges can only be cancelled on the rail that owns them, and a pause is not a cancellation.
- Save the confirmation email, case number and status screen before disputing anything.
- Turn auto-renewal off on the day you buy, cap the card the vendor holds, and put the earliest notice window in the calendar.
References
- 1Norton 360 Deluxe
us.norton.com
- 2Avast Store
avast.com
- 3CNET, Best Antivirus 2026
cnet.com
- 4
- 5
- 6C+R Research, Subscription Service Statistics and Costs
crresearch.com
- 7
- 8
- 9
- 10Bitdefender, Subscription Auto-Renewal
bitdefender.com
- 11Malwarebytes, Manage auto-renewal for your Malwarebytes subscription
help.malwarebytes.com
- 12Google Play Help, Cancel, pause, or change a subscription
support.google.com
- 13
- 14Norton, Cancellation and Refund Policy
support.norton.com
- 15
- 16
- 17GetHuman, McAfee Customer Service
gethuman.com
- 18Bitdefender, How do I get a refund?
bitdefender.com
- 19Malwarebytes, Pricing and Plans 2026
malwarebytes.com
- 20GetHuman, Norton AntiVirus Customer Service
gethuman.com
- 21Apple Support, Cancel a subscription from Apple
support.apple.com
- 22
- 23CFPB, How do I stop automatic payments from my bank account?
consumerfinance.gov
- 24CFPB, How do I dispute a charge on my credit card bill?
consumerfinance.gov
- 2515 U.S.C. § 8403, Negative option marketing on the Internet
law.cornell.edu
- 26
- 27eCFR, 16 CFR Part 425
ecfr.gov
- 28Privacy.com, Virtual Cards
privacy.com
This story was produced automatically by a channel. One sentence is all it takes for Neodrop to keep producing for you.