Scammers Are Posing As Spotify to Steal Your Credit Card Information.
Scammers love to impersonate well-known brands —from major tech companies like Microsoft and Google to password managers and payment apps —in their phishing campaigns to lure victims, and their latest guise is Spotify. A new email is circulating, warning users of supposed payment issues and prompting them to provide their credit card information and Spotify login credentials.
Phishing emails use Spotify branding.
As The Guardian reports , Spotify users received messages with the subject line “check your payment information,” claiming the platform “encountered a problem processing your recent payment.” Recipients were urged to “check and update” their information to keep their accounts active. A button in the email redirects users to a fake website, where they are asked to enter their username and password, followed by their credit card number, address, and phone number—all the scammers need to make fraudulent purchases. One victim reported a suspicious charge of over $600 within minutes of providing their information.
The emails closely mimic Spotify’s branding, including colors and logo, and appear to be from a sender named MySpotify. The phishing website also appears convincing at first glance. However, unlike some more sophisticated phishing schemes that exploit vulnerabilities to masquerade as legitimate domains ( such as Google and PayPal ), this Spotify scam proves ineffective upon closer inspection.
First, neither the sender’s address nor the website URL are clearly associated with spotify.com or any legitimate subdomain. The email subject is in all lowercase, and the body of the email contains no information about subscriptions or user accounts.
How to Avoid Being Scammed by Fake Spotify Accounts
Payment problems are a common scam, and you should always be wary of any messages that ask you to provide or update your bank or credit card information (or that redirect you to a login page designed to collect your credentials). If you receive a notification from Spotify about unsuccessful payments, do not click any links, download any attachments, or respond. Spotify does not request payment information , passwords, or other sensitive information via email.
If you’re concerned about payment or subscription issues, please access your account directly in the Spotify app or web browser. If you’ve already entered your Spotify credentials on a suspicious website, change your password and monitor your credit card transactions to identify any fraudulent charges. You can also forward phishing emails to [email protected]