Netflix has not canceled your subscription. Another wave of scams targeting platform users

Phishing attacks (impersonation of well-known brands in order to extort money or data) on the Internet are not abating. Cybercriminals keep coming up with new methods and reasons why we “should” click on the link they prepared.

Netflix hasn’t blocked your account. It’s a scam

This time, the scammers are back with a well-known phishing attack impersonating the popular Netflix. As he recently informed, a new wave of e-mails and text messages reaching the boxes of Poles has been observed for some time.

Emails are sent in Polish and look similar. In the messages, criminals usually inform about the alleged occurrence of a “system error”, as a result of which the payment for the service was charged twice. They further claim that the platform has already initiated the refund process, but in order to settle it, invoice details must be provided.

In other versions of the message, scammers claim that there was a problem with the payment, therefore the subscription was canceled or the terms of service were updated. In each case, the message contains a link to a crafted page where scammers demand sensitive data.

How not to be deceived?

The goal of criminals is to take over the login details on the platform (and thus the account) as well as the number, expiration date and CVV code of the payment card, which will almost certainly end up with the bank account being wiped out. In some cases, after the data is hijacked, the fake sites redirect to the real Netflix site, which is supposed to lull the victim of the attack.

It’s worth taking a close look at any suspicious email. Cybercriminals usually do not cope well with the Polish language, hence the frequent errors. You should also pay attention to the address of the website to which the messages are directed. In this case, the scammers didn’t even make sure that the URL resembled the real address of the Netflix website.

It is also best not to click on any links contained in e-mails and text messages at all. If we have doubts, a good solution would be to log into your account on a given platform and check whether it actually requires us to complete any data.