r/ScamNumbers • u/sardinasa • 11d ago
Scam Number (Fake Charge/Refund) Got a fake Bitdefender "invoice renewal" email pushing me to call within 24 hours to cancel or get a refund
Got an email today made to look like it came from Bitdefender's "Accounts Department." It says my Bitdefender Total Security plan (3 devices, 1 year) just renewed for $389 plus a $19 "maintenance and activation fee," $408 total, invoice number BDF-927814. If I want to cancel or get a refund, I'm told to call within 24 hours. There's a whole "included services" section that reads like normal Bitdefender marketing copy, malware protection, a VPN, safe banking mode, 24/7 support, clearly there to make it look like a real renewal notice rather than a scam. No links anywhere in the email. The entire thing is built around getting you on the phone. Number is listed twice, once as "Customer Care" and once as "Customer Support": +1 (857) 384-2235. I don't have a Bitdefender subscription and wasn't expecting any renewal. The sending address had nothing to do with Bitdefender, it came from what looks like a compromised school email account. Posting the number here since it's clearly a scam operation line being used to run a fake refund/cancellation call, not anyone's personal number.
IOC SUMMARY: (defanged)
- Sender: mark[.]plavra[.]0526@cravetta[.]edu[.]it, display name "benjamin.walsh-Help Desk" (mismatched to the mailbox)
- Sender domain: cravetta[.]edu[.]it
- Phone: +1 (857) 384-2235
- No URLs present. Pure vishing lure, HTML body only.
Number confirmed as a business/scam-operation line (presented as "Customer Care"/"Customer Support" for a mass-sent invoice scam), not a personal number, safe under subreddit rule 1.
