Andorra Warns of Netflix Phishing Scam Mimicking Payment Updates

Andorra's Cyber Security Agency has issued a warning about a phishing scam impersonating Netflix, based on an alert from Spain's National Cybersecurity Institute (Incibe) Internet User Security Office (OSI).

The fraud involves emails sent to trick users into updating their payment method to regain access to the streaming service. Messages typically carry subject lines like "NETFLIX – Update your account to view it again," though variations may appear. Senders display domains that do not match Netflix's official ones.

The email claims a payment method failed to process and urges recipients to update it via a prominent link to resume using the platform.

Clicking the link leads to a fake page with a simple math problem, mimicking a security check. Users then see a replica of Netflix's login screen. After entering credentials, the site prompts for bank card details.

The OSI advises preserving all evidence, such as emails and screenshots, in case of victimisation. Victims should immediately contact their bank for guidance on handling compromised cards.

Authorities emphasise checking sender domains and avoiding unsolicited links to prevent falling for such scams.