Cybercriminals have launched a new campaign targeting users of popular streaming platforms such as Netflix. Using phishing techniques, they are sending out fake emails about alleged account blocks or payment issues. The aim of the attack is to steal login credentials and payment card information. The Silesian Police have issued an official warning, urging people to exercise particular caution and verify URLs before entering any sensitive data online.
Attack on Payment Data
Scammers impersonate Netflix by sending emails about the need to update payment card details.
Silesian Police Warning
Officers urge users to check the sender and website address before logging into services.
Social Engineering Mechanism
Criminals apply time pressure and fear of losing service access to prompt victims into action.
Cybercriminals are once again exploiting the recognizability of global streaming brands to carry out attacks on users in Poland. According to information provided by the Silesian Police, fraudsters are impersonating popular services, including Netflix, by sending out fake emails. The perpetrators' modus operandi is based on classic phishing. The recipient receives a message suggesting an alleged account block or an urgent need to update payment details. Such a message aims to create a sense of urgency in the victim and prompt them to immediately click the provided link without verifying the sender.
These messages contain links leading to spoofed websites that closely resemble official VOD platforms. These sites contain forms designed to steal logins, passwords, and full payment card details. Criminals disguise URL addresses to lull users accustomed to regular subscription payments into a false sense of security. Police emphasize that streaming services typically do not ask for sensitive financial data directly via links sent in electronic correspondence. Any such request should be treated as a potential attempt at identity theft or theft of funds from a bank account.
Fake Message vs. Safe Contact Standard: message content: alarm about account block or urgent payment update → calm verification of information outside the message link; link purpose: page stealing login and card data → accessing the service independently via the official website or app; recipient emotion: time pressure and fear of losing access → control and domain check Police officers recommend that if you receive a suspicious email, under no circumstances should you use the links contained within it. Instead, you should manually type the service's address into your browser window or use the official mobile app to check your account status. Although campaigns of this type recur cyclically, the current wave of attacks is characterized by high precision in mimicking Netflix's visual design, increasing the risk of successful fraud among less attentive internet users. If card details have already been entered on a suspicious site, it is crucial to immediately contact your bank to block the payment instrument and prevent money theft.
1 — most important step: do not click links in emails Two Reactions After Receiving a Suspicious Email: first step: clicking the link in the message → independently opening the official website or app; sender verification: assuming the header is genuine → checking the domain and full address; entering data: entering login and card details → halting the operation until authenticity is confirmed Cybersecurity experts point out that fraudsters use social engineering, preying on the fear of losing access to favorite entertainment. The scale of the phenomenon in Poland is significant due to the immense popularity of streaming services. Police appeal for educating loved ones, especially older individuals, who may be more susceptible to this type of digital manipulation. Only vigilance and verifying the source of information can effectively stop criminals from gaining control over our finances.