Just had this from

Boletines INCIBE

'Date 09/02/2026
Importance 4 - High
Resources AffectedAll those users who have accessed the fraudulent website described in this notice and provided their access and subsequently payment details.

DescriptionINCIBE has identified a campaign impersonating the streaming platform Netflix. The fraud involves sending email notifications designed to trick users into entering a new payment method in order to regain access to the platform.

SolutionIf you received an email supposedly from Netflix, but didn't open the fraudulent link, you did the right thing. We would appreciate it if you forwarded it to our incident inbox. This way, we can gather the necessary information to prevent other users from falling victim to this type of fraud. Once you've forwarded it, delete the message from your inbox to avoid accessing it later and also block the sender.

If you have accessed the link and provided your personal or card details, we suggest you follow these recommendations. If you need more personalized advice, you can always contact the Cybersecurity Helpline .

• If you have provided your card details, contact your bank to inform them of the situation. They will give you instructions on how to proceed to block your card or even generate a new one so that cybercriminals cannot use it to make charges.
• Review the latest transactions on your bank account. If you notice anything suspicious, report it to your bank.
• Gather and save all available evidence of the fraud, such as malicious links or screenshots. You can use online witness services to corroborate the evidence you've submitted. You can also file a report with the police , providing all the evidence gathered throughout the process.
• Practice egosurfingregularly for several months to determine if your personal information has been exposed or misused.
• Change your login credentials for Netflix and all other accounts where you use them. Keep in mind that the most secure option is to use a different password for each site and, if possible, enable two-step verification.

Before clicking on a suspicious link, it's advisable to visit the official website of the entity. For example, in the case of Netflix, we recommend visiting their Help Center . From there, you can access questions asked by other users that may be helpful, or, related to this case, follow the platform's official procedure for updating your payment method or the company's procedure for handling unrecognized or unauthorized Netflix charges .

DetailA phishing campaign impersonating Netflix has been detected. The scam involves sending emails claiming that payment processing failed and that account updates are required to regain access to the platform. Clicking the fraudulent link redirects users to a fake website designed to steal their Netflix login credentials, billing information, and credit card details.

Apparently, the text of the email is well written and formatted, but if we look at the sender we will see that it does not correspond to the official Netflix domain.

The subject line of these emails is: “NETFLIX – Update your account to watch again”, although it is possible that other emails with similar subject lines exist.'

As always take care!