{"success":true,"data":{"id":"subscription-cancellation-fraud-phish","label":"Fake subscription service (Norton/McAfee/Amazon Prime) claiming a large auto-renewal charge occurred and asking recipient to call/click to cancel — refund advance-fee fraud; real subscription cancellations never require toll-free calls from unsolicited emails.","description":"Fake subscription service (Norton, McAfee, Amazon Prime) claiming a large auto-renewal charge has been processed and asking recipient to call a toll-free number or click a link to \"cancel\" and receive a refund — refund advance-fee fraud and subscription slamming. Real subscription services do not cold-email urgent cancellation prompts with phone numbers; these emails aim to get the target to call a fraudulent support center where they are manipulated into providing credentials or banking access. Detection: subscription auto-renewal charge + click/call to cancel/receive refund vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +3. Source: GC1-R22; FTC subscription scam advisory 2025; FBI IC3 refund scam patterns.","tier":"danger","category":"phishing","isThin":false}}