Cybercriminals are attempting to steal personal and financial information from Netflix users across 23 countries through a large-scale phishing scam. These attackers are sending SMS messages claiming there are issues with users’ Netflix accounts, often citing problems with payments or subscription renewals. The messages create a sense of urgency, urging recipients to click on malicious links that appear to be legitimate Netflix websites. However, these links lead to fraudulent sites designed to steal sensitive data such as usernames, passwords, and credit card information.

The scam has affected users in major regions like the United States, Germany, Spain, and Australia.  Security experts, including Bitdefender, state that these phishing attempts are often localized to specific regions, which makes them more convincing. While Netflix does not communicate with users via SMS or ask for authentication through such messages. Moreover, the attackers exploit this trust to deceive victims.

 Once users provide their information on these fake websites, their details are frequently sold on the dark web. Therefore, leaving them vulnerable to identity theft and financial fraud. The phishing attacks are particularly dangerous because Netflix does not offer two-factor authentication (2FA), which could help protect accounts from such breaches.

For staying safe, it is recommended that users use antivirus software to detect potential phishing attempts and protect personal data. Users are also advised never to click on links from unsolicited messages, even if they appear to be from Netflix.

Additionally, using antivirus software can help detect potential phishing attempts and protect personal data. Instead, they should manually visit Netflix’s official website and log in directly to check their account status. It is also recommended to use antivirus software to detect potential phishing attempts and protect personal data.