{"success":true,"data":{"id":"fake-netflix-streaming-service-payment-failed-phish","label":"Fake Netflix / Hulu / Disney+ / Spotify streaming service payment-failed phishing — fake billing-failure notice from a streaming brand urges victim to update payment details via a link harvesting card or streaming credentials; Netflix is the #3 most impersonated brand (APWG Q4 2024); FTC 2024: subscription service impersonation is a top-10 phishing lure","description":"Phishing emails impersonating Netflix, Hulu, Disney+, Spotify, Apple TV+, HBO Max/Max, Peacock, or Paramount+ with fake billing-failure notices — claiming a payment failed or a subscription is past due, then driving victims to update payment details via a link that harvests payment card numbers or streaming credentials. Key facts: (1) APWG Q4 2024 Phishing Activity Trends Report: Netflix is the #3 most impersonated consumer brand globally; streaming service impersonation emails are sent in high volumes (tens of millions per week) across all major platforms simultaneously, with the specific brand swapped but the template identical; (2) FTC 2024: subscription service impersonation is a top-10 phishing lure — streaming billing notices are effective because: virtually everyone has at least one streaming subscription, billing failures do genuinely occur, and the emotional stakes (losing access to content) are high enough to prompt rapid action; (3) The attack typically collects payment card details (not just streaming credentials) because the phishing page includes a full payment form mimicking the streaming service's billing page — the harvested card is then used for fraudulent purchases far beyond the streaming subscription; (4) Legitimate billing-failure emails from streaming services arrive from verified company domains, include a List-Unsubscribe header, and deep-link to the account portal — they never embed a standalone payment form in the email and never link to non-company domains. Warning signs: sender domain not the official streaming service domain, no List-Unsubscribe header, link to an unfamiliar domain, threat of immediate account suspension unless a link is clicked.","tier":"danger","category":"phishing","isThin":false}}