Netflix, the popular home streaming service is advising customers to be wary of an e-mail phishing scam that asks users to verify their payment and or their account information.
The scam works like this, The user receives an email from what appears to be Netflix with the header "Notice of Verification Failure. If a user opens the e-mail it details an issue with billing and users to verify their personal information within 24 hours to prevent their account from being cancelled. By clicking on the enclosed link, the reader is taken to a CAPTCHA page. Once a person has correctly filled in the CAPTCHA information, they are taken to a Netflix look-alike site and asked enter their login credentials, billing address information and credit card details.
There are several things give the Netflix scam away according to Forbes. Although the phishing site looks legitimate, if you click on any of the links such as “need help” or “Sign up now”, the page just reloads. Another giveaway is the URL. Instead of Netflix.com, you’ll see axxisgeo.com. which belongs to a Texas based oil company and is not part of the scam according to Forbes.
The Netflix scam is a clever attack, and it shows just how cyber-criminals are evolving to evade security controls. Always be suspicious of any email or text asking you to update personal or credit card details.
Netflix is advising customers on how to avoid the scam, or any other suspicious e-mails, with the following advice posted on their website.
-
We will never ask for your personal information by texts or email. This includes:
-
Credit or debit card numbers
-
Bank account details
-
Netflix passwords
-
We will never request payment through a 3rd party vendor or website.
If you receive a text or email requesting any of the above, it is not from Netflix.
What should I do if I received a suspicious email or text?
What should I do if I clicked a link or provided personal information?
-
Change your Netflix password to a new one that is strong and unique to Netflix.
-
Update your password on any websites where you use the same email and password combination.
-
Contact your financial institution if you entered any payment information, as it may have been compromised.
-
Forward the message to phishing@netflix.com with the steps above.
What are the best ways to keep my information safe?
Be careful anytime you get an email or text requesting personal information.
-
Don't click a link when in doubt; go directly to the company website instead.
-
Never provide personal or financially sensitive information through email.
-
Check the sender’s address to see if it looks legitimate.
-
On a computer browser, hover over any links before clicking on them to see the URL. Make sure the links go where you expect them to.
-
Install anti-virus software to help guard your devices and personal information.