Beware, Netflix users: This scam may steal your credit card information

Cybersecurity experts have warned Netflix users about an SMS phishing campaign that is stealing account and credit card information. Hackers send this phishing text claiming that the affected person has not paid for their subscription and that their account will soon be suspended, the New York Post reported.

“These SMS panic campaigns against Netflix customers are pervasive and never-ending, but they vary in size and scope,” security firm Bitdefender said.

“NETFLIX: There was a problem processing your payment. To keep your services active, please log in and verify your details at…” one such warning reads. There is a link that redirects viewers to a website that looks identical to the Netflix platform and asks them for their credit card number and login details.

These stolen credentials are sold to underground rings on the dark web.

Netflix’s lack of two-factor authentication protection has made it easier for the scam to spread in up to 23 countries, including the US. The streaming platform is vulnerable to spear phishing because it only relies on usernames and passwords for security reasons.

Netflix said in a statement about the SMS scam: “We will never ask you to enter your personal information in a text message or email. We will never request payment through a third party or website. If the text message or email links to a URL you don’t recognize, don’t tap or click on it.”

If you’ve already clicked on one of these links, the streaming giant recommends changing your Netflix password with a new, strong and unique password. It is also recommended that you update your password on any other websites or apps where you have used the same email address and password combination.

Bitdefender, a cybersecurity company, advises users to avoid opening suspicious links and enter websites manually instead of clicking on links without verification to avoid falling for scammers.