Scammers are sending realistic fake emails that appear to come from Spotify, warning users that their payment method has expired and they must update it immediately to avoid losing access.
The emails contain a link to a fraudulent website that mimics Spotify's official login page. Once users enter their username and password, the attackers capture the credentials and can then access the account, potentially stealing saved payment information.
How to spot the scam
The phishing messages often contain subtle errors in the sender address or greeting. Spotify never asks for sensitive information via email or text. Any urgent request to update payment details should be treated with suspicion.
Cybersecurity firms have reported an uptick in this campaign in recent weeks, targeting both free and premium subscribers.
