A text or email says your Netflix, Disney+, or Amazon Prime payment failed — the link steals your card details
Fake texts or emails warn that your Netflix, Disney+, or Amazon Prime payment failed and your account will be suspended. Clicking the link opens a convincing fake billing page that captures your password and full card details. Vercel-hosted Netflix phishing clusters are active in October 2026.
Also known as: fake Netflix billing scam Australia, streaming subscription payment failed text Australia, Amazon Prime account suspended phishing Australia, Disney Plus payment failed email Australia, fake Netflix account suspended SMS Australia, Stan billing scam Australia
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
What to do right now
- 1 Do not click the link. Open the streaming service's official app or go directly to their website by typing the URL yourself to check your account status
- 2 If you entered your credit card details: call your card issuer immediately to report fraud and request a new card number
- 3 If you entered your streaming account password: change it immediately and enable two-step verification on that account
- 4 Forward suspicious texts to 0429 999 888 (Scamwatch SMS reporting line) and suspicious emails to [email protected]
- 5 Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam or ReportCyber at https://www.cyber.gov.au/report.
Red flags
- ⚠ An unexpected text or email says your streaming subscription payment failed and your account will be suspended — Netflix, Disney+, and Amazon Prime do not send urgent cancel-or-pay ultimatums by SMS
- ⚠ The sender's domain or URL is not the company's official domain (netflix.com, amazon.com.au, disneyplus.com) — fake URLs use hyphens, random words, or are hosted on .vercel.app, .app, or lookalike domains
- ⚠ You are asked to re-enter your full credit card number, CVV, and expiry — legitimate billing updates happen inside the official app or website after you sign in normally
- ⚠ The message creates urgency — 'Your account will be suspended within 24 hours unless you update your payment details'
- ⚠ Netflix, Amazon, and Disney say they will never ask for card details, passwords, or personal information by text or unsolicited email
Sources
- TechRadar — Netflix phishing scam targeting Aussies via dodgy emails
- Trend Micro Australia — Australian Netflix subscribers being targeted by phishing email scheme
- Yahoo News Australia — Netflix scam targets nearly 12 million Australians
- Scamwatch / The Leader — Scamwatch: don't be fooled by this Netflix scam
- Emerging signals triage 2026-10-12 — 12 active Vercel-hosted Netflix phishing clusters (global, no geo-gate; confirmed targeting English-speaking subscribers including Australia)