Netflix scam alert! This scam can steal your credit card details
Cybersecurity experts have warned Netflix users about an SMS phishing campaign that aims to steal account and credit card information. According to the New York Post, hackers are sending out this phishing text, stating that the recipient has not paid for their subscription and that their account would be suspended soon.
PTC News Desk: Cybersecurity experts have warned Netflix users about an SMS phishing campaign that aims to steal account and credit card information. According to the New York Post, hackers are sending out this phishing text, stating that the recipient has not paid for their subscription and that their account would be suspended soon.
"These SMS scare campaigns targeting Netflix customers have become ubiquitous and never stop, but they vary in size and scope," according to Bitdefender, a security company.
"NETFLIX: There was an issue processing your payment. To keep your services active, please sign in and confirm your details at..." read an alert.
There is a link that takes users to a website that looks identical to the Netflix platform and requests their credit card information and login credentials.
These stolen credentials are sold to underground networks on the dark web.
Netflix's lack of two-factor authentication security has made it easier for the fraud to grow in up to 23 countries, including the United States. The streaming platform is vulnerable to spear phishing because it relies solely on usernames and passwords for protection.
In response to the text message scam, Netflix stated, "We will never ask you to enter your personal information in a text or email. We will never request payment through a 3rd party vendor or website. If the text or email links to a URL that you don't recognize, don't tap or click it."
If you've already clicked any of these links, the streaming giant recommends changing your Netflix password to something strong and unique. It also recommended that you change your password on any other websites or apps where you used the same email and password combination.