Hello @Robin_Wells
Receiving an unsolicited security code text from Norton, typically indicates one of two scenarios: either a “smishing” scam designed to steal your credentials, or a legitimate login attempt on your account by someone else.
Immediate Actions to Take
Do Not Click Links: If the text contains a link to “secure your account” or “verify identity,” do not click it. These often lead to spoofed login pages designed for credential harvesting.
Do Not Share the Code: Never provide the security code to anyone, especially if someone calls you claiming to be from Norton “support” to help resolve a security issue.
Change Your Password: If you have a Norton account, navigate directly to Norton.com in your browser (do not use links in the text) and update your password immediately.
Verify 2FA Settings: Check your account’s two-factor authentication (2FA) settings to ensure only your authorized devices and phone numbers are linked.
How to Identify a Scam vs. Real Alert
Urgency & Threats: Scams often use scare tactics, such as claiming your subscription has expired or threatening immediate charges (e.g., $399 or $499) unless you call a number or click a link.
Spelling & Grammar: Professional communications from Norton rarely contain typos or poor formatting, which are common red flags in phishing texts.
Unsolicited Contact: Norton will not call you or text you unprompted to request personal information, payment via gift cards/wire transfers, or remote access to your computer.
Reporting the Incident
To Norton: You can report suspicious SMS messages by taking a screenshot and emailing it to sms@norton.com or forwarding the text message directly to that address.
If you suspect your Norton account has been compromised after interacting with a phishing text, take the following steps immediately to secure your data and restore your account.
Regain and Secure Account Access
Change Your Password: If you can still log in, change your password immediately to a strong, unique one (at least 15 characters). If you are locked out, use the official Norton Password Reset page.
Enable Multi-Factor Authentication (MFA): Once logged in, set up MFA (also known as 2FA) to add a second layer of security.
Review Account Settings: Check for unauthorized changes to your registered email, phone number, or recovery settings.
Remove Unfamiliar Devices: Check the list of connected devices in your Norton portal and revoke access for any you do not recognize.
Protect Your Finances and Identity
Contact Your Bank: If you entered credit card or banking information, call your financial institution immediately to report fraud, block future charges, and request a new card.
Place a Fraud Alert: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to place a free fraud alert or credit freeze on your file.
Audit Other Accounts: If you used the same password for other sites (e.g., email or banking), change those passwords immediately.
Report the Incident
To Norton: Send a screenshot of the phishing text to sms@norton.com or forward the message directly to that address.
To Authorities: File a report with the FTC at ReportFraud.ftc.gov or the FBI’s Internet Crime Complaint Center (IC3).
===================================
Norton Genie: You can use Norton Genie, a free AI-powered tool, to analyze suspicious screenshots and texts for fraud.
Official Reporting: Report suspicious texts by taking a screenshot and emailing it to sms@norton.com.