Soft2Securescam registry · since 2014

Netflix "payment failed / account suspended" phishing

Emails saying your Netflix account is suspended or your payment could not be processed, with a link to "update" billing details on a look-alike page. Netflix documents the pattern and asks for copies at phishing@netflix.com.

Impersonates
Netflix
Arrives by
email
First seen
2019-08
Last seen
2019-08
Specimens
1
Updated
2026-09-02

Right now the only version we have seen

How to recognise it

  1. A suspension you can check by simply opening Netflix
  2. A link to "update payment" instead of the app or site
  3. Generic greeting, no last four digits of your card

What to do

  1. Do not use the link; open Netflix by typing netflix.com
  2. Forward the email to phishing@netflix.com
  3. Delete it
Already called, clicked or paid? what to do in the next hour
  1. Entered a password? Change it now, and everywhere else you used the same one
  2. Entered card details? Call your bank, ask them to block the card and reissue
  3. Entered a one-time code? Sign in to the real service now and check for changes to email, phone and payment settings

How it changed

nothing to compare yet · one wave on record
2019-08suspended account, "update your payment details"
Got a different version? A new subject line, sender, number or domain becomes the next point on this line. Redacted before publication. Send it →
02 Sept2026
Registry

Family created

Grew out of the 2019 guide. No fresh specimens on record — dormant, though the pattern recurs.

Same trick, other brands

Indicators

  • None on record yet. Indicators change weekly; an empty list never means an email is safe.

Registry data

Machine-readable
/scams/netflix-payment-failed.json
Timeline feed
/scams/netflix-payment-failed/feed.xml
Sources
2 · 1 change logged
Licence
CC BY 4.0 · attribution required
Created / updated
2026-09-02 / 2026-09-02