The Civil Guard has warned about a phishing campaign affecting Netflix users in Catalonia and other areas. The fraud is distributed through emails that simulate being official communications from the streaming platform.
Fraudulent email impersonates Netflix and requests bank details
The message that victims receive indicates that "the payment could not be completed" and requests the update of personal data to continue using the service. By clicking, the user is redirected to a web page that imitates the Netflix login portal.
The objective of this campaign is to obtain access credentials, billing data, and bank card information from users. In some cases, before reaching the form, users are asked to perform a "mathematical operation" to generate a false sense of security.
Civil Guard Recommendations Against Scam
The Guardia Civil advises to always check the sender and verify that the email domain is the official one before clicking any link. If there are doubts about the authenticity of the message, it is recommended not to use the email button and to access Netflix's official application or website directly to check the account status.
In case of having provided personal or banking data through the fraudulent link, the Guardia Civil indicates that one must act quickly. It is recommended to contact the banking entity to block suspicious movements and the card, save screenshots and evidence, change Netflix passwords and those of any other service where the key is repeated, and file a report.
"If you have doubts, always access from the official website and never from suspicious email links" - Spokesperson, Guardia Civil
How to collaborate to curb the campaign
The Guardia Civil reminds that it is possible to report fraudulent mail to the incident channels to help identify the campaign and protect other users. Citizen collaboration is key to minimizing the impact of this type of fraud.
- Always verify the sender and domain before clicking
- Do not access your Netflix account from links received by email
- If you have provided data, contact your bank and change passwords
- Report the incident and save all possible evidence