For years, millions of users turned to Avast antivirus software, believing it would safeguard their online privacy. Instead, the company was caught secretly collecting and selling detailed browsing data to corporate giants like Google and Microsoft. Now, the Federal Trade Commission (FTC) has stepped in, ordering Avast to pay $16.5 million in refunds to affected consumers.
If you used Avast between August 2014 and January 2020, you may be eligible for compensation. Here’s what happened, why it matters, and how to claim your refund before the June 5, 2025, deadline.
The Privacy Betrayal: What Avast Didn’t Tell You
Avast marketed itself as a privacy-first cybersecurity company, but behind the scenes, it was tracking users’ online behavior and selling it through its subsidiary, Jumpshot. This data included:
- Websites visited
- Online searches
- Shopping history
- Potentially private browsing activity
Major companies, including Google, Microsoft, Pepsi, and Home Depot, reportedly bought this data for marketing insights. Consumers were unaware their online habits were being turned into a product, violating the very principles of privacy protection Avast had promised.
After an FTC investigation, Avast agreed to delete all improperly collected data and compensate users who purchased their software during the affected period.
How to Claim Your Refund
If you purchased Avast antivirus software between August 2014 and January 2020, you could be entitled to a refund. The FTC is sending out email notices between February 24 and March 7, 2025, with instructions on how to file a claim.
Follow these steps to see if you qualify:
- Check your email for a message from the FTC containing a Claim ID and Confirmation Code.
- Visit www.AvastSettlement.com to submit your claim.
- File your claim by June 5, 2025. Late claims will not be accepted.
- Wait for your refund. Payments are expected to be distributed in 2026, though exact amounts depend on the number of claims filed.
The FTC has warned that it will never ask consumers to pay money or provide banking information to claim their refunds. If you receive any such requests, they are scams.
Why This Matters For Privacy Advocates
The Avast case is another example of tech companies making bold privacy promises while secretly profiting from consumer data. This situation raises important questions:
- Can antivirus companies be trusted with user data?
- How many other companies are engaging in similar practices?
- Will this FTC settlement be enough to deter future violations?
With increasing scrutiny under GDPR and emerging U.S. state privacy laws, companies are being forced to rethink how they handle user data. But consumers must remain vigilant—understanding how companies use data is essential in an era where privacy is constantly under threat.
Take Action Now
If you were an Avast user during the affected period how do you feel knowing that your privacy was violated? If you’re a company engaging in similar practices as Avast was then reach out to our team of data privacy experts to discuss how we can help you become compliant and not run afoul of the FTC and the other data privacy regulators.
The big question that was asked after this privacy hack came to light was: Would you still trust a company that sold your browsing history?
