Geek Squad Scams To Watch Out for in 2023

Geek Squad scams involve cybercriminals impersonating Best Buy’s tech support service, Geek Squad, in order to coax unsuspecting consumers into giving up their personal information or credit card details.  When it comes to phishing scams, Geek Squad is one of the most impersonated brands out there, along with the likes of PayPal, Amazon, and Microsoft.

Although these sorts of email phishing scams are usually targeted toward individuals, phishing is also used as an attack vector utilized in large-scale data breaches. The rise of AI tools like ChatGPT also means these sorts of attacks are likely to become even harder to spot.

In this guide, we’ll run through the various different types of Geek Squad scams, as well as how you can report the activity to the authorities as well as Best Buy. We also cover some telltale signs present in most phishing emails that indicate they might be malicious. All in all, we cover:

• What is the GeekSquad Scam?
• Geek Squad Auto-Renewal Scams
• Geek Squad Malware Phishing Scams
• Geek Squad Invoice Scams
• Geek Squad Refund Scams
• Geek Squad Tech Support Scams
• Geek Squad Antivirus Scams
• Geek Squad Browser Pop-Up Scams
• Geek Squad Password Reset Scams
• Geek Squad Protection Plan Scams
• How to Report Geek Squad Scams
• How to Avoid Geek Squad Scams

What is the Geek Squad Scam?

Geek Squad scams are a class of email phishing scams in which hackers impersonate Geek Squad, a subsidiary company of consumer electronics retailer Best Buy. Geek Squad is a service that specializes in the maintenance and repair of tech products.

In Geek Squad scams, the threat actor will use Geek Squad’s logo, services, and subscription program to attempt to lure unsuspecting victims – as well as Geek Squad subscribers – into handing over their personal information.

According to search volume data seen by Tech.co, Geek Squad scams are one of the most highly searched-for scams on the internet – which suggests a lot of people are receiving them.

However, some Geek Squad scams are carried out over the phone, a type of scam sometimes referred to as “vishing” (voice phishing). Email variations of the scam, on the other hand, are getting increasingly sophisticated – just look how genuine this fake landing page looks:

Image Credit: Reddit User GiantSean

Hundreds of thousands of people sign up for Geek Squad every year, and total sign-ups are thought to be over two million, which makes it the ideal disguise for scammers.

Plus, it’s a subscription service, which can provide a base for a number of common social engineering narratives scammers often deploy (e.g. your subscription has been canceled/your subscription is about to expire/you subscription is about to auto-renew etc.).

Geek Squad Auto-Renewal Scam

Geek Squad auto-renewal scams are one of the most common variations of the Geek Squad scam. This is probably because it motivates victims to act quickly out of fear that they may be charged hundreds – or even thousands – of dollars.

Image Credit: Reddit User mb73072

To entice victims to click on malicious links or ring fake customer support helplines, scammers sometimes (like in the example pictured above) suggest that you’ll be able to cancel the renewed subscription if you act quickly enough.

Another telltale sign that this email isn’t legitimate is the 48-hour window it says you have to act within – the scammer is trying again to inject a sense of urgency that will make victims act erratically. This is a common tactic used in almost all phishing scams.

Geek Squad Malware Phishing Scams

Malware phishing is a common attack vector used by scammers, many of which choose to impersonate Geek Squad, Microsoft, and other technology companies.

In malware phishing scams, scammers attach malicious files to emails, often disguised as harmless PDFs. They then try and lure recipients into opening the files, usually by claiming they contain information such as a subscription contract or invoice. After the victim downloads the file, the malware wreaks havoc on their computer.

Geek Squad and other tech-focused companies are ripe for impersonation in this kind of scam because it runs subscription services and the average person may think it’s reasonable that it would send digital files via email. So, be wary of opening attachments in emails from recipients you don't recognize.

One way to avoid phishing scams like these is to use anti-virus software. Many offer phishing protection, and will actively scan your emails to identify and flag potentially harmful messages.

Check out our recommended anti-virus software.

Geek Squad Invoice Scams

Some Geek Squad scammers will send victims fake invoices which detail payments for subscriptions and orders, such as this fake invoice posted by a user on Reddit:

Image Credit: Reddit User Robot_Giggles

Again, the whole goal is to make victims worry that they’ve been charged for something they didn’t pay for and wasn’t delivered – causing them to eventually ring the number listed in the email out of desperation and worry.

Geek Squad Refund Scam

Another tactic used by scammers orchestrating Geek Squad-themed phishing campaigns is claiming that a victim is actually due a refund from the Best Buy subsidiary.

In these sorts of scams, scammers will often try to get you to ring a number, and then claim that they’re actually Geek Squad’s customer support. They’ll then claim that they need to take remote control of your computer in order to process the refund.

Next, the scammer will claim that they’ve accidentally refunded you too much – and need you to send them back an amount of money. But they haven’t really refunded you at all, let alone too much – they’re just taking your money.

This kind of scam preys on people in desperate need of funds, willing to believe that filling in a simple form or logging into their account will quickly see them rewarded with cash.

Geek Squad Tech Support Scam

Another phone-based Geek Squad scam involves scammers cold calling unsuspecting victims and claiming that they're aware that there's some sort of issue with their device that needs fixing. Usually, they'll use the cover that there's some sort of computer virus or malware that they're detected, in an attempt to scare the victim into letting them take control.

In these sorts of scams, the perpetrators are trying to social engineer the conversation to the point where either the victim pays them money to carry out bogus repairs or maintenance, or allows them to assume remote control of their device. If it's the latter case, the scammer may:

• Say that the issue has impacted their bank accounts and that they should move their money
• Load malware onto their device, lock it, and demand payment for the files to be unlocked
• Steal personal information stored on the device and use it t hack into the victim's accounts

Geek Squad Antivirus Scam

The Geek Squad antivirus scam is similar to the auto-renewal scam, but suggests that the prospective victim has signed up for costly Antivirus software, their subscription has expired, and a new 3-year bill will come out of their account shortly.

Image Credit: Reddit User Strongr_Togethr

Of course, if you haven’t signed up for this antivirus software via Geek Squad, there’s no need to worry – just ignore the email and do not proceed.

Geek Squad Browser Pop-Up Scams

Although you won’t find this kind of Geek Squad scam lurking around your email inbox, you might bump into it online.

Browser pop-ups are a common attack vector scammers use to trick people into clicking through to malicious websites – even if you try to close them down. Many of these, ironically, claim that your PC is infected with malware or a virus.

As Geek Squad is a tech support and maintenance company, it’s natural that they might be used in such pop-ups to convey a bit of fake legitimacy and increase click-through rates.

However, they’re not going to be pushing their service through browser pop-ups – so if you see it, ignore it and close down your browser. If you can, refrain from closing the pop-up or interacting with it in any way.

Geek Squad Password Reset Scam

The Geek Squad Password reset scam starts with an email that says that someone attempted to reset your account password for Best Buy.

The image below is reportedly a legitimate email from Best Buy, but if you've received it, it means someone is trying to see if your email address is associated with a Best Buy account.

Image Credit: Reddit User Bengpen2

Scammers will use this as the first stage in a two-part scam. The goal of this first stage is trying to arouse suspicion in the victim that someone is attempting to hack them. The second stage is sending through a Geek Squad phishing email, which will try to convince the victim that someone has signed up for the service or ordered a product using their details.

As the first email is legitimate and comes from a genuine Best Buy address, it helps to lull the victim into a false sense of security and make them more likely to click links or phone numbers included in the second email.

Juggling passwords can be tricky, so to ensure against poor password practice, we suggest using a password manager. Some will even alert you when one of your passwords has been compromised, allowing you to quickly change it before any real damage can be done.

Geek Squad Protection Plan Scams

Another Geek Squad scam that tries to capitalize on the ever-expanding market of people purchasing antivirus software, Geek Squad protection plan scams simply involve scammers ringing round long lists of numbers trying to sell fake protection services.

Other companies, like McAfee, Norton, and Microsoft are regularly impersonated in order to fleece unsuspecting victims out of their hard-earned cash with a promise of security services, online, over email, and in browser pop-ups.

Of course, if you are interested in purchasing an antivirus product like Surfshark One, head over to the provider’s website rather than going through a process over a call.

How to Report Geek Squad Scams

If you’re in the US and you believe you’ve received a phishing email purporting to be from Geek Squad, the best thing to do is report it to the Federal Trade Commission.

The FTC also recommends that you should forward the email to the Anti-Phishing Work Group at reportphishing@apwg.org.

You can also file a report with the Internet Crime Complaint Centre, which is a division of the FBI focused on online crime.

If you live in the United Kingdom and you’ve received a Geek Squad scam, you can report it to Action Fraud, or forward them to report@phishing.gov.uk, an address managed by the National Cyber Security Center.

How to Spot and Avoid Geek Squad Scams

Spotting and Avoiding Geek Squad scams isn’t difficult if you follow a few simple steps. Some tell-tale signs that an email purporting to be from Geek Squad is actually a scam include:

• Spelling errors and grammar issues
• The sender’s address is a public email address/not a company email
• Odd or impersonal greetings
• “Scary” email subject lines (e.g. IMMEDIATE ACTION REQUIRED)
• Strange or inconsistent formatting

However, there are other, more subtle signs that an email might not be what it seems. Geek Squad scam emails – as well as phishing scams in general – may:

• Try to inject a sense of urgency into victims: If an email is encouraging you to act quickly or face some sort of negative consequence, it might be a scam.
• Create some kind of financial incentive to act: If an email suggests you will gain or lose money if you do not act, or says you have an unpaid bill, it might be a scam.
• Suggests there is a problem with your account: If an email says your account has been locked, or suspended, or your password needs to be reset, it might be a scam.

If you’re not a Geek Squad subscriber, and you receive an email referring to you as a subscriber, do not interact with it, download any attachments or click on any links contained within it. If you are worried someone may have set up an account in your name, simply ring Geek Squad and inquire as to whether this has happened.

If you are a subscriber to Geek Squad, we’d also recommend contacting the service another way if you receive an email from the company, such is the prevalence of Geek Squad scams in 2023. You can quickly and easily find Geek Squad’s genuine customer support line via Google – so if you feel you need to contact them, do it this way.

It might take a little bit longer, yes, but aside from that, there’s really no cost to you to do this, and it’s a sure fire way to ensure you’re never the victim of a phishing scam.

If you receive an email, whether it’s from Geek Squad or another company, treat it with extreme caution.