Don't click a terms-change message just because its logo looks familiar.
Open the company's app yourself, or type a known web address you already trust. Find the notice there and compare it with the email or text.
Verify first.
For US consumers, two questions come next: Is the message authentic, and does the contract and applicable law permit the change? A genuine notice can still announce a worse price, renewal term, privacy practice, cancellation process, or dispute right.
What a terms-change notice actually controls
A notice tells you what the provider says it changed or wants changed. It does not, by itself, prove that a new contract formed or that the provider was entitled to make the change.
The old agreement still matters. Read it alongside the proposed replacement terms, the way the notice was delivered, and the law governing the service. An email deadline tells you what the company wants, not necessarily what the law requires.
Calling an update "minor" settles nothing. Price, recurring billing, access to data, cancellation, and dispute rights can all make a change important.
Red flags that deserve a pause
Turns out, grammar is a weak test. Polished messages can be fake, and genuine company emails can contain typos.
Look for these signals, especially in combination:
- An urgent threat, such as "accept today or lose access."
- A sender address with a lookalike domain or unusual country-code domain.
- Links that lead somewhere other than the company's known website.
- A request for your password, full card number, Social Security number, or one-time security code.
- An unexpected attachment, QR code, or shortened link.
- No clear summary of what changed, when it takes effect, or where to read the new terms.
- A new fee, price increase, or renewal charge buried in a long notice.
- A retroactive charge or rule aimed at activity completed before the notice.
- A cancellation method that is much harder to find than the sign-up process.
- Contact information that appears only in the suspicious message.
The FTC's phishing guidance warns that phishing links and QR codes can lead to fake sites built to steal money or personal information. A familiar logo proves very little.
Compare the notice before you trust it
| Check | A more credible notice may include | A suspicious or risky notice may include |
|---|---|---|
| Sender | The provider's established domain and normal account details | A lookalike domain, odd spelling, or display name only |
| Timing | A stated effective date with time to review | A short deadline backed by an account-freezing threat |
| Explanation | A summary, a link to the full terms, and the reason for the update | Vague language such as "policy improvements" |
| Action | A review page reached through the official account | A demand to click an email button immediately |
| Information requested | Confirmation through the normal signed-in account | Passwords, payment details, or verification codes by email |
| Cancellation | Clear instructions and the actual end date | A hidden path, repeated offers, or no confirmation |
Use these clues to verify the message, not to decide the legal question. A real notice may be sloppy; a fake one may reproduce the branding perfectly.
How the warning signs vary by service
Subscriptions and SaaS. Check the renewal price, billing frequency, free-trial conversion, cancellation path, data-export rights, and any new arbitration language. A price increase may be a legitimate business decision. Burying it in a vague terms refresh deserves closer review.
Banks and credit cards. Use the bank's app, or call the number on your card or statement. Never use an email link to unlock an account. An unfamiliar fee, rate change, or transaction belongs in the institution's official dispute or complaint process.
Gyms and rentals. Start with the signed membership agreement or lease. A gym may be able to change prices or services under its contract, but a landlord's ability to change a lease during its term can depend on the lease and state or local law. The email cannot answer that alone.
Shopping accounts and mobile apps. Privacy changes may expand data sharing. Loyalty notices may ask you to re-verify a card, and app messages may push you outside the normal account flow. Open privacy settings and account pages directly.
Which rules and policies actually matter
The FTC can address deceptive business practices. An FTC complaint is not a court ruling on your contract or a guaranteed individual remedy.
The agency's phishing guidance focuses on suspicious links, attachments, QR codes, and requests for sensitive information.
Thing is, subscription law is not one nationwide checklist. Legal analyses from Holland and Knight and Arnold and Porter report that the FTC's 2024 amended Negative Option Rule was vacated by the Eighth Circuit in 2025. The FTC continued pursuing subscription practices under Section 5 of the FTC Act and the Restore Online Shoppers' Confidence Act.
That history does not create a universal 30-day, 45-day, or 60-day notice rule for every US terms change. State automatic-renewal laws, financial-product rules, leases, and the original contract can set different requirements.
A separate legal analysis of online terms modifications discusses why conspicuous notice, a meaningful chance to review, and provable assent can matter in a dispute. A provider's statement that you "agreed" does not settle whether the notice was clear or the change was allowed. An unpleasant update is not automatically illegal.
What to do after receiving a suspicious notice
Start with the message, not its link. Then check the account, terms, and payment record separately.
-
Pause the message. Don't click, scan, open an attachment, or reply. If you entered a password or one-time security code, open the real service separately and change the password. If you shared payment information, contact the card issuer or bank through a trusted number.
-
Verify independently. Use the provider's app, a saved bookmark, or an address you type yourself. Look for an account alert, updated terms page, billing notice, or support ticket there. Ignore phone numbers and email addresses supplied by the suspicious message.
-
Save evidence safely. Keep the message, sender details, full link, date, screenshots, account notices, invoices, and relevant versions of the terms. Save the original email if possible. Keep passwords, full card numbers, and one-time codes out of your notes or complaint.
-
Identify the practical change. Write down the old price, new price, effective date, renewal date, cancellation method, data-use change, and any new dispute clause. If the provider won't show an old version, record what the account displayed before you accepted anything.
-
Choose whether to continue. If you don't want the new arrangement, cancel through the official account page and save the confirmation. Cancellation usually addresses future billing; it doesn't automatically resolve charges that already posted.
-
Ask the provider specific questions. Request the clause authorizing the change, the date the notice was sent, the effective date, and the exact steps to cancel or opt out. Keep the conversation in writing when you can.
-
Handle the payment separately. A credit-card billing dispute, an unauthorized debit, an electronic funds transfer error, and a voluntary subscription cancellation use different procedures. Tell the payment provider what happened and follow its instructions promptly. A card dispute doesn't necessarily cancel the underlying account.
-
Report the conduct and escalate when appropriate. Use ReportFraud.ftc.gov for phishing, impersonation, or deceptive business practices. For a bank or credit-card issue, use the institution's complaint channel and consider the Consumer Financial Protection Bureau. A state attorney general may be appropriate for broader deceptive conduct, while rental and local membership disputes may have separate local agencies.
Build a complaint that can be checked
A complaint works best when someone else can check it. State what happened, when it happened, how much money was involved, and what you want fixed.
Keep it factual. Don't guess about criminal intent without evidence.
| Evidence to save | What it helps establish |
|---|---|
| Original notice and sender details | What the company or impersonator actually said |
| Old and new terms | The specific language that changed |
| Account statements and invoices | Dates, amounts, and recurring charges |
| Support messages and ticket numbers | Your attempt to resolve the issue |
| Cancellation or opt-out confirmation | When you requested the change |
| Screenshots of links or account pages | Where the notice directed you |
Your request can be short:
On [date], I received a notice stating that [specific term] would change on [effective date]. My account was charged [amount] on [date]. Please identify the contract provision supporting the change, confirm whether my account is canceled, and explain what refund or adjustment is available.
To be honest, agencies don't promise that every complaint will produce a refund or an investigation. A report still creates a record and may help identify a broader pattern. Ask the provider and payment company for the individual remedy you want, then report the conduct through the channel that fits the problem.
Common questions
Is every urgent terms-change email a scam?
No. Some are genuine. Urgency is a reason to verify independently, not a reason to click quickly. Don't let the deadline choose your verification method.
Does clicking "I agree" erase my rights?
Not automatically. The outcome can depend on the notice, the original agreement, the type of change, the evidence of assent, and applicable state or federal law. This article can't determine whether a particular clause is enforceable.
Can I get a refund after a terms change?
Possibly. There is no general refund promise for every unwanted update. Ask the provider about its cancellation and refund policy, document the request, and contact the payment provider if a charge was unauthorized or otherwise disputed under its process.
Will an FTC complaint get my money back?
Not necessarily. Report fraud and deceptive practices to help regulators spot patterns, but pursue your individual billing dispute with the merchant, bank, card issuer, or other payment provider.
What if I already gave the scammer my login details?
Change the password through the real website or app. Change it anywhere else you reused it, contact the affected financial institution, monitor the account, and follow the provider's fraud instructions.
Open the provider's app yourself now. Save the notice, and leave its links untouched until the account page confirms the change.