This email announces you 90 days of free subscription to Netflix: don’t bite, it’s a scam

A new cyber-scam is now targeting Netflix users: the INCIBE (National Institute of Cybersecurity) has given notice of the massive sending of malicious e-mails announcing to users that their Netflix subscription has expired. Cybercriminals are, however, ‘generous’ and offer a free 90-day extension… however, behind this offer is an attempt to steal information.

And it is that, if we accept, we will be asked to enter our personal data (including credit card data) before granting said extension, in what constitutes the typical phishing attack, which not seen a thousand times seems to lose effectiveness.

What is the phishing attack?

Fraudulent emails, with subjects such as , alert the user about the expiration of their subscription to the streaming platform.

As a supposed loyalty strategy, they promise a free extension of 90 days if the user links a credit card to validate the account. They ensure that no charges will be applied to the card provided.

By clicking on the link included in the email, users are redirected to a fake website pretending to be the official Netflix platform (see main image). On this page, the company logos and the same subscription expired message are displayed, along with a button to extend the subscription for free.

However, as we said before, the hidden objective is to convince the user to provide their personal and credit card information in a form.

The mistake, however, we have made at the same moment that we have opened the e-mail and we haven’t checked the sender address. If it had, we would have verified that it does not correspond to an official Netflix address.

And that is precisely one of the first details that we always have to check in these cases.

What to do if you have received this type of mail?

If you have received a similar email and have not provided information, it is essential Mark it as spam and remove it from your inbox.

On the other hand, if you have fallen into the trap and have given your personal and bank details in the form, you should not delete anything: on the contrary, You should immediately contact your bank to notify them of the situation and take the necessary measures. This could involve canceling the credit card involved to prevent potential unauthorized charges.

Next:

1. Regularly review the movements of your bank account to detect possible unauthorized charges.
2. Collect evidence of fraud, saving emails and screenshots of the process. These tests can be useful if you need to file a complaint.
3. Get in touch with the State Security Forces and Corps (FCSE) and report the facts, providing the evidence collected.
4. Do regular “egosurfing” to check if your personal or banking details have been exposed online. If so, follow the process provided by the Spanish Agency for Data Protection (AEPD) to request its deletion through suppression to oblivion.