Today I received an e-mail from PayPal with a charge of $300 USD for Windows Defender. I have no idea if this is a scam; the mail did come from PayPal. So someone (a Stanley D. Hise from San Francisco) has charged my PayPal account. I did a quick Google search, and one site WTF? Do I Have to Pay for Microsoft’s Defender Antivirus Now? | PCMag said that Defender was now linked to an Office 365 subscription. I am running Windows 10 21H2 64-bit. I figured that this forum would have persons who know the “official” answer. Is Windows Defender still free to users like me? Is the PayPal charge a scam? Thanks.
![]() |
There are isolated problems with current patches, but they are well-known and documented on this site. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
Is Windows Defender Free?
Home » Forums » AskWoody support » Windows » Windows 10 » Windows 10 versions – no longer supported » Windows 10 version 21H2 – November 2021 Update » Is Windows Defender Free?
- This topic has 18 replies, 10 voices, and was last updated 2 years, 8 months ago.
Tags: Windows Defender Cost
Viewing 11 reply threadsAuthorReplies-
PKCano
Manager -
b
AskWoody_MVPSeptember 9, 2022 at 3:24 pm #2476611WTF? Do I Have to Pay for Microsoft’s Defender Antivirus Now? | PCMag said that Defender was now linked to an Office 365 subscription.
Yes, but only the “new” Defender, not the “old” Defender (as explained in that article).
Here’s Microsoft’s attempt to “clarify” their typical naming confusion:
What is the difference between Microsoft Defender and Windows Security?
Microsoft Defender is a new cross-device app that helps people and families stay safer online. Microsoft Defender adds new features and a simplified, user interface. Microsoft Defender also brings valuable device protection to iOS, Android, Windows, and Mac, with malware protection, web protection, real-time security notifications, and security tips. Microsoft Defender is available in the Apple, Google, and Microsoft app stores and requires a Microsoft 365 Personal or Family subscription to use.
Windows Security, formerly known as Windows Defender Security Center, is built-in security on Windows PCs to protect your device and data. Windows Security is pre-installed and automatically enabled. Windows Security includes Microsoft Defender Antivirus software that protects your Windows device and data against viruses, ransomware, trojans, and other malware unless non-Microsoft Antivirus software is active.
Microsoft Defender — Find answers to commonly asked questions (see FAQ #9)
Is Windows Defender still free to users like me?
Yes.
Is the PayPal charge a scam?
Yes. It’s possible for phishing emails to appear from PayPal:
Your next Phishing email may come straight from PayPal
PayPal Phishing Scam Uses Invoices Sent Via PayPal
-
F A Kramer
AskWoody PlusSeptember 9, 2022 at 3:28 pm #2476612Are you absolutely sure that the email came from PayPal? I strongly suspect that it did not and the email “return address” is not actually that of PayPal. Claiming, by email, that one owes PayPal for a purchase is a well-known scam. An immediate check of your credit account and other bank accounts is in order, just in case. Anyway, file a protest with PayPal and state that you believe this to be a scam.
-
bsfinkel
AskWoody LoungerSeptember 9, 2022 at 3:57 pm #2476616I received one e-mail.
From: Stanley D Hise <service@paypal.com>
Delivered to att.net/prodigy via mx3.slc.paypal.com [173.0.84.228].
Reply-To: Stanley D Hise <juliannmmmorgan@yahoo.com>I am a retired e-mail administrator, and I think that I know how to interpret an RFC 5322 e-mail header. As the mail came from PayPal (and that IP address is registered to PayPal), it seems legitimate. But the Reply-To: line looks strange. A Google search for “Stanley D. Hise” returned nothing. I am not sure how this person/scammer? got hold of my PayPal information. I looked at an e-mail from PayPal – my monthly cell phone charge – and it came via the same PayPal e-mail address. But that had no Reply-To: address.
-
b
AskWoody_MVPSeptember 9, 2022 at 5:06 pm #2476643I am not sure how this person/scammer? got hold of my PayPal information.
What PayPal information was included (other than your email address)?
Did the email message start with your name or “Dear PayPal User”?
1 user thanked author for this post.
-
Coldheart9020
AskWoody Lounger
-
bbearren
AskWoody MVPSeptember 9, 2022 at 4:05 pm #2476618Any email that portends (no, I did not mean “pretends”) to be a legitimate charge from a financial institution proffering a pending charge likely contains a link that one should not, by any notion, click on in order to investigate. That’s what they want you to do.
Open your favorite browser, go to the known-good web site for that institution to investigate further. Again, do not click on a link, for any reason, in any email that tells you that you owe money for any thing.
Such emails are known as “phishing”.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".2 users thanked author for this post.
bbearren
AskWoody MVPSeptember 9, 2022 at 4:15 pm #2476619While Microsoft will accept Pay Pal as a payment method, one must first go to the Microsoft account one wishes to use for a Microsoft purchase and add Pay Pal as a method of payment.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".Susan Bradley
ManagerSeptember 9, 2022 at 4:26 pm #2476621bsfinkel
AskWoody LoungerSeptember 9, 2022 at 4:28 pm #2476622The payment is NOT from Microsoft; it appears on the invoice as Stanley D Hise, San Francisco. I assume that this COULD be a MS retailer, but then Google would have found something. I went to PayPal to try to complain about this charge, but PayPal would not let me do anything, I assume because the charge is in a “Pending” status. I will check tomorrow to see if this charge has advanced from the Pending status.
-
Alex5723
AskWoody PlusSeptember 9, 2022 at 4:37 pm #2476624Tell us about messages from PayPal imposters
Forward suspicious email to phishing@paypal.com
When you aren’t sure if a message that appears to be from PayPal is really from us, don’t click on any links, call any listed phone numbers, or download attachments. Forward the entire email to phishing@paypal.com and delete it from your inbox.
-
bbearren
AskWoody MVPSeptember 9, 2022 at 4:40 pm #2476626I have a Microsoft 365 account. It is billed to a credit card. Here is the email I received from Microsoft <microsoft-noreply@microsoft.com>
Do you have a Microsoft 365 account?
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".
Just another Forum Poster
AskWoody LoungerSeptember 9, 2022 at 8:05 pm #2476669The payment is NOT from Microsoft; it appears on the invoice as Stanley D Hise, San Francisco.
Was this “invoice” an attachment to the e-mail?
If so, then it’s extremely likely its fake and opening it might have infected your PC with some sort of malware.
Was this payment listed in the “Activity” section of your PayPal account when you logged in?
If so and you don’t remember approving it, it could be from an Automatic Payment you “unknowing” agreed to sometime during a previous purchase.
How to Cancel an Automatic Payment on PayPal
• Log into your PayPal account with your normal credentials.
• Click the “Settings” icon at the top right.
• Click “Payments”.
• Click “Manage automatic payments”.
• Find the payment you want to cancel and click “Cancel”.
• Follow the instructions to confirm the canceled payment.bsfinkel
AskWoody LoungerSeptember 10, 2022 at 8:26 pm #2476845This was not an invoice. It was an e-mail from PayPal stating that $300 USD was being charged to my account. It listed the seller and a phone number. I did call the phone number and talked briefly with someone who had a foreign accent. Then, as I was not sure that Defender (whatever MS calls it these days) was still free, I hung up. The charge are still pending on my PP account, so I cannot contest it. Monday morning, if the charge is still in a pending state, then I will talk to PP support. I want to know how this scammer was able to charge to my PayPal account.
bsfinkel
AskWoody Loungerbsfinkel
AskWoody LoungerSeptember 19, 2022 at 2:46 pm #2479988I reported the scam e-mail to phishing@paypal.com for PP to investigate. I do not see the charge on my PP bill, but I have not logged in to PP in a few days to determine if the charge is still pending. I assume that PP will delete the charger after they research my report to phishing.
Viewing 11 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
FBI: Still Using One of These Old Routers? It’s Vulnerable to Hackers
by
Alex5723
1 hour, 22 minutes ago -
Windows AI Local Only no NPU required!
by
RetiredGeek
18 minutes ago -
Stop the OneDrive defaults
by
CWBillow
2 hours, 11 minutes ago -
Windows 11 Insider Preview build 27868 released to Canary
by
joep517
12 hours, 7 minutes ago -
X Suspends Encrypted DMs
by
Alex5723
14 hours, 19 minutes ago -
WSJ : My Robot and Me AI generated movie
by
Alex5723
14 hours, 37 minutes ago -
Botnet hacks 9,000+ ASUS routers to add persistent SSH backdoor
by
Alex5723
15 hours, 14 minutes ago -
OpenAI model sabotages shutdown code
by
Cybertooth
15 hours, 51 minutes ago -
Backup and access old e-mails after company e-mail address is terminated
by
M W Leijendekker
4 hours, 1 minute ago -
Enabling Secureboot
by
ITguy
11 hours, 1 minute ago -
Windows hosting exposes additional bugs
by
Susan Bradley
23 hours, 45 minutes ago -
No more rounded corners??
by
CWBillow
19 hours, 34 minutes ago -
Android 15 and IPV6
by
Win7and10
9 hours, 19 minutes ago -
KB5058405 might fail to install with recovery error 0xc0000098 in ACPI.sys
by
Susan Bradley
1 day, 12 hours ago -
T-Mobile’s T-Life App has a “Screen Recording Tool” Turned on
by
Alex5723
1 day, 14 hours ago -
Windows 11 Insider Preview Build 26100.4202 (24H2) released to Release Preview
by
joep517
1 day, 9 hours ago -
Windows Update orchestration platform to update all software
by
Alex5723
1 day, 22 hours ago -
May preview updates
by
Susan Bradley
1 day, 9 hours ago -
Microsoft releases KB5061977 Windows 11 24H2, Server 2025 emergency out of band
by
Alex5723
1 day, 1 hour ago -
Just got this pop-up page while browsing
by
Alex5723
1 day, 14 hours ago -
KB5058379 / KB 5061768 Failures
by
crown
1 day, 11 hours ago -
Windows 10 23H2 Good to Update to ?
by
jkitc
13 hours, 34 minutes ago -
At last – installation of 24H2
by
Botswana12
2 days, 13 hours ago -
MS-DEFCON 4: As good as it gets
by
Susan Bradley
10 hours, 21 minutes ago -
RyTuneX optimize Windows 10/11 tool
by
Alex5723
3 days, 1 hour ago -
Can I just update from Win11 22H2 to 23H2?
by
Dave Easley
1 day ago -
Limited account permission error related to Windows Update
by
gtd12345
3 days, 15 hours ago -
Another test post
by
gtd12345
3 days, 15 hours ago -
Connect to someone else computer
by
wadeer
3 days, 9 hours ago -
Limit on User names?
by
CWBillow
3 days, 13 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.