A NORTON charge on your card: antivirus software, or a book order

NORTON on a card statement is two different companies. A line that reads NORTON *AP or NORTON *NP is NortonLifeLock, the antivirus and identity-protection business: an annual or monthly subscription that renews by itself unless it is cancelled.² A line that begins WW NORTON or W W NORTON is W. W. Norton & Company, the book publisher, and has nothing to do with antivirus software.⁸ A line that begins GOOGLE *NORTON is a purchase through Google Play, where Google, not Norton, handles the receipt and the refund.^{1, 14} Since the 2022 merger, Norton and Avast are brands of the same company, Gen Digital, and a Norton purchase in EMEA can appear as Avast Software S.R.O. The Avast page lists every descriptor that company and its resellers use.

What the state’s card data shows

The State of Delaware publishes the merchant name on every purchase made with its employee cards. Counted on 30 October 2026, the file has 34 lines with NORTON in the name. They are not one merchant: 14 are the antivirus business, 18 are the book publisher, and 2 are Google Play purchases of a Norton product.¹

The antivirus lines are not a price list; they are government purchases, and the data does not say which product or how many devices were bought. What they show about the billing is still concrete.¹

• No credit line among the 14 antivirus charges. The same file carries a credit for the Google Play charge, and plenty of credits for other merchants, but no negative amount under NORTON *AP or NORTON *NP in eleven years. The data does not say why; it says only that no state card got a credit back on the same feed.
• The AP lines are all in the subscription category; the NP lines are not. That is the card network’s category, not Norton’s description of the plan, but it is the one structural difference between the two forms in the file. Norton’s own help page uses the AP form for a monthly charge: “The transactions will show up as ‘Norton *AP’ (order number starting with AP)”.²
• One department’s line moved from 59.98 to 114.99 in eleven months, then to 119.99, and stayed there. The Department of Corrections was charged 59.98 as NORTON *NP1428322175 on 28 October 2022, 114.99 as NORTON *AP1485998568 on 24 September 2023, 119.99 as NORTON *AP1555711704 on 18 October 2024, and 119.99 as NORTON *AP1639462789 on 23 September 2025. The intervals are roughly a year; the file does not say whether the plan changed. It does show that the same department’s line nearly doubled in the first step and then held at 119.99 for two more years.
• The book publisher takes the larger amounts. The 18 WW NORTON lines total 26,758.27, against 1,099.34 for the 14 antivirus lines. The largest publisher line is 4,550.00, charged twice on 16 June 2020 to MOT Charter School; the largest antivirus line is 119.99. A statement line that says WW NORTON is therefore not a small software renewal, and the two should not be added together as if they were the same merchant.

What Norton publishes about the renewal

The subscription is designed to renew without an action from the customer. Norton says the annual payment can be taken up to 35 days before the renewal date, and that annual subscribers get an email with the renewal price beforehand: “Renewal payments are billed annually (up to 35 days before renewal) or monthly depending on your billing cycle.”⁶ Its renewal FAQ puts the notification earlier still: “We send a notification email before each upcoming annual renewal (usually about 50-65 days ahead), so that you are not caught off-guard”, with the price, the renewal date and the billing date.⁵

• Annual: 60 days, on the first charge and on every renewal. “The purchase of an annual subscription is eligible for a full refund, if requested within 60 days of the date of purchase,” and “each subsequent annual charge is also eligible for a full refund if requested within 60 days of being charged”.³
• Monthly: 14 days on the first charge, nothing after. The first monthly charge can be refunded within 14 days; “subsequent monthly charges are not eligible for a refund”.³
• Four places get a pro-rata refund after the 60 days. For customers in the UK, Germany and the Netherlands, the policy gives “a pro-rated refund for the full months remaining in your subscription period, beginning with the month following your refund request”; Quebec gets a pro-rata refund for the remaining days. The United States section has no such clause.³
• The UK regulator made the pro-rata right a formal undertaking in 2021. The Competition and Markets Authority recorded undertakings from NortonLifeLock Ireland and NortonLifeLock UK giving customers whose contract had auto-renewed “an ongoing right to exit the contract and obtain a pro-rata refund of the amount they have been charged, after their existing refund window has expired”, extending that right to customers refused a refund in 2020, and making refunds available through an automated system. The same undertakings require customers to be told up front that the contract will auto-renew, the price on renewal and when the money will be taken.⁷
• Cancelling stops the next charge, not the current term. Norton’s steps are to sign in, open My Subscriptions, choose the subscription and click Cancel Renewal or Manage Subscriptions; the subscription runs to the end of the paid term and then ends.^{3, 4} The account shows the change within 24 hours, the email within 24 to 48.³

What cardholders say they found

The posts below are the writers’ accounts, not our findings. They are here because they show the three shapes the billing takes: a free trial that renews, a charge the cardholder cannot place, and a renewal taken weeks before the date the cardholder expected.

• A poster in r/antivirus wrote on 8 November 2024 that a $49.99 line from “norton.com” appeared although they had bought nothing. In an edit they said Norton told them a free VPN demo had been cancelled the year before, that the system had renewed it anyway, and that a refund was being issued. That is the writer’s account of the call and the outcome.⁹
• A poster on Norton’s own community wrote on 19 April 2023: “On third of February 2023 there is a charge on my credit card from Norton for 262 dollars I have no idea what it is for and nowhere can I find a Norton email address to sort it out.” The replies point to automatic renewal; the thread does not record an outcome.¹⁰
• A poster wrote on 22 October 2020 that a Norton 360 Deluxe subscription due to renew on 24 November had been charged to the card on 20 October, more than a month early. That is the writer’s account; the product page’s own “up to 35 days before renewal” is the company’s.^{6, 11}
• A poster in Australia wrote on 28 September 2023 that Norton billed $188.99 for five devices plus a $5 international transaction fee, and that “the autorenew function billed my credit card 35 days before my current subscription ends”. The thread does not record a refund.¹²

How to find the account and stop the charge

1. Decide which Norton the line is. NORTON *AP or NORTON *NP followed by an order number is the antivirus business. WW NORTON or W W NORTON is the book publisher: search your email for a book, a textbook or a course catalogue, and ask the publisher’s customer service, not Norton Support.^{1, 8} GOOGLE *NORTON is a Google Play purchase; the receipt is in your Google account and Google Play’s refund policy applies.¹⁴
2. Find the Norton account. Search every inbox for “Norton”, “order” and “renewal”. The order number on the statement is the one in the email Norton sent at purchase and at each renewal; Norton’s own instructions use the prefix to decide which cancellation path applies.³ If no account and no email exist, treat the card as compromised and go to step 5.
3. Turn off the renewal. At my.norton.com, open My Subscriptions, pick the subscription, and choose Cancel Renewal or Manage Subscriptions. Norton says the change can take up to 24 hours to appear and the email up to 48 hours to arrive. The protection continues to the end of the paid term; it does not end at once.^{3, 4}
4. Ask for the refund inside the window. For an annual plan, the request has to be made within 60 days of the purchase or of the renewal charge; for a monthly plan, within 14 days of the first charge. If the account is in the UK, Germany, the Netherlands or Quebec, the pro-rata right continues after the 60 days. Keep the date of the request and the order number.³
5. Then the card issuer. If the charge was not authorised, or a cancellation you can prove was ignored, write to the card issuer — name, address, account number and what the mistake is — so the letter reaches it within 60 days after the first bill with the error was sent. The issuer must acknowledge in writing within 30 days and resolve within 90, and you may withhold the disputed amount while it does.¹³ If the account is not yours, ask for a new card number: a stored card number keeps being charged.

Is this a scam?

No: Norton is a real subscription business, the charge is published in its own renewal terms, and a state’s cards paid it on 14 lines over eleven years.^{1, 6} What the record shows is a renewal model with three places a cardholder can lose track: a free trial that becomes a paid plan, a renewal taken up to 35 days before the date the customer is watching, and a notification email that may be the only warning. The 60-day refund is real, but it runs from the charge, not from the day the customer notices it. A NORTON line that matches no account and no email is a different matter — someone else may have used the card — and belongs with the bank the same day.

Why this page is on a site about held money

This site records payment companies that hold back money that belongs to someone else. Norton is not in the incident record. This page is here because the statement line does not name the product, because the same word belongs to a book publisher, and because an early renewal plus a 60-day window is where a dispute starts. Other software that renews by itself is under ADOBE *ADOBE, DROPBOX, GRAMMARLY CO* and OPENAI *CHATGPT SUBSCR. Other lines are in the table of statement names.

Sources

1. State of Delaware Open Data, State Employee Credit Card Transactions, fields “merchant”, “cat_descr”, “trans_dt”, “dept_name” and “merchandise_amt”. Lines whose name contains NORTON. Queried and counted on 30 October 2026: 34 lines, of which 14 are NORTON *AP or NORTON *NP, 18 begin WW NORTON or W W NORTON, and 2 are GOOGLE *NORTON SECURE. The antivirus lines total 1,099.34 with no credits; the publisher lines total 26,758.27.
2. Norton Support, “FAQ: Monthly Billing”: the statement line “Norton *AP” with an order number starting with AP, and the monthly renewal. support.norton.com. Read on 30 October 2026. No archived copy was made on that date.
3. Norton Support, “Norton Cancellation and Refund Policy”: the 60-day money-back guarantee on annual purchases and renewals, the 14-day monthly window, the exclusion of later monthly charges, the pro-rata terms for the UK, Germany, the Netherlands and Quebec, and the cancellation steps and confirmation times. support.norton.com. Read on 30 October 2026. Archived copy of 30 October 2026.
4. Norton Support, “Stop your Norton subscription from automatically renewing”: the My Subscriptions steps and the rule that the subscription continues to the end of the paid term. support.norton.com. Read on 30 October 2026. No archived copy was made on that date.
5. Norton Support, “FAQ: Norton subscription and renewal”: the notification email “usually about 50-65 days ahead”, with the renewal price, billing date and related details. support.norton.com. Read on 30 October 2026. No archived copy was made on that date.
6. Norton, “Norton 360 Deluxe” product page, Important Subscription, Pricing and Offer Details: “Renewal payments are billed annually (up to 35 days before renewal) or monthly depending on your billing cycle. Annual subscribers will receive an email with the renewal price beforehand.” us.norton.com. Read on 30 October 2026. No archived copy was made on that date.
7. Competition and Markets Authority, “Anti-virus software” case page, last updated 19 October 2021: the 14 June 2021 undertakings from NortonLifeLock Ireland Ltd and NortonLifeLock UK Limited, the ongoing pro-rata refund after auto-renewal, the extension to customers refused in 2020, automated refunds, and the upfront disclosure requirements. gov.uk. Read on 30 October 2026.
8. W. W. Norton & Company, book catalogue. wwnorton.com/books. Read on 30 October 2026. The site identifies the company as W. W. Norton & Company, Inc.; the Delaware lines spell it WW NORTON, WW NORTON BOOKPUBLISHING and W W NORTON CO INC.
9. Reddit, r/antivirus, “Norton just charged $49.99 to my credit card. I do not use them and have not been to their website?!?!”, posted 8 November 2024: the $49.99 line, the free VPN demo the poster says was cancelled the year before, and the refund the poster says Norton agreed to issue. reddit.com. Read on 30 October 2026 in a browser. The web archive returned 520 for this address on that date.
10. Norton Community, “Do not understand credit card charge”, posted 19 April 2023: the $262 charge of 3 February 2023 and the replies about automatic renewal. community.norton.com. Read on 30 October 2026. Archived copy of 30 October 2026.
11. Norton Community, “Norton 360 Subscription Renewal charged over 1 month in advance”, posted 22 October 2020: the 24 November 2020 renewal charged on 20 October 2020. community.norton.com. Read on 30 October 2026. Archived copy of 30 October 2026.
12. Norton Community, “Norton is a ripoff!”, posted 28 September 2023: the $188.99 charge for five devices, the $5 international transaction fee, and the statement that the renewal was billed 35 days before the subscription ended. community.norton.com. Read on 30 October 2026. Archived copy of 30 October 2026.
13. Federal Trade Commission, “Using Credit Cards and Disputing Charges”: how to write to the card issuer, and the 60-day, 30-day and 90-day periods. consumer.ftc.gov. Read on 30 October 2026 in the archived copy of 13 October 2026; the live address returned 404 to this machine’s IP.Archived copy of 13 October 2026.
14. Google Play Help, “Learn about Google Play refund policies”: purchases made through Google Play’s billing system, the different policies by type of purchase and location, and the route for a purchase the cardholder did not make. support.google.com/googleplay. Read on 30 October 2026.

What this page does not claim. The Delaware data does not say which Norton product each line bought, whether a line was a first purchase or a renewal, or why no credit appears; the merchant category is assigned by the card network, not by Norton. The 35-day figure is Norton’s own description of when an annual renewal can be billed, not a measurement of every charge. The community posts are the writers’ accounts, and three of the four do not record an outcome. The verification date for every fact here is 30 October 2026.