What are the red flags of this scam?

An unexpected text or email says your streaming subscription payment failed and your account will be suspended — Netflix, Amazon Prime, Disney+, and Sky do not send urgent cancel-or-pay ultimatums by SMS • The link's domain is not the service's official site (netflix.com, amazon.co.uk, disneyplus.com, sky.com) — fake URLs use hyphens, random words, or are hosted on .vercel.app, .app, or lookalike domains • You are asked to re-enter your full credit card number, CVV, and expiry — legitimate billing updates happen inside the official app or website after you sign in normally • The message creates urgency — 'Your account will be suspended within 24 hours unless you update your payment details now' • The email originates from a Gmail, Outlook, or non-corporate domain rather than an official @netflix.com or @amazon.co.uk address • Streaming services say they will never ask for card details, passwords, or personal information by text or unsolicited email

What should I do if this happened to me?

Do not click the link. Open the streaming service's official app or go directly to their website by typing the URL yourself to check your account status • If you entered your credit card details: call your card issuer immediately to report fraud and request a new card number • If you entered your streaming account password: change it immediately and enable two-step verification on that account • Forward suspicious texts to 7726 (free on all UK networks) and suspicious emails to report@phishing.gov.uk (the NCSC's Suspicious Email Reporting Service) • Report to Report Fraud at https://www.reportfraud.police.uk or call 0300 123 2040.

HIGH phishing Last reported: 18 Oct 2026 Share

A text or email says your Netflix, Amazon Prime, or Disney+ payment failed — the link steals your card details

Q: Is this a scam?

Yes. This is a documented scam pattern. Fake texts and emails warn that your Netflix, Amazon Prime, Disney+, or Sky subscription payment failed and your account will be suspended. Clicking the link opens a convincing fake billing page that captures your password and full card details. Active Vercel-hosted Netflix phishing clusters observed October 2026.

Fake texts and emails warn that your Netflix, Amazon Prime, Disney+, or Sky subscription payment failed and your account will be suspended. Clicking the link opens a convincing fake billing page that captures your password and full card details. Active Vercel-hosted Netflix phishing clusters observed October 2026.

Also known as: fake Netflix billing scam UK, streaming subscription payment failed text UK, Amazon Prime account suspended phishing UK, Disney Plus payment failed email UK, fake Sky subscription renewal text UK, NOW TV billing scam UK, fake Netflix account on hold SMS UK

Already happened to you? Do this in the next few minutes

1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.

What to do right now

1 Do not click the link. Open the streaming service's official app or go directly to their website by typing the URL yourself to check your account status
2 If you entered your credit card details: call your card issuer immediately to report fraud and request a new card number
3 If you entered your streaming account password: change it immediately and enable two-step verification on that account
4 Forward suspicious texts to 7726 (free on all UK networks) and suspicious emails to [email protected] (the NCSC's Suspicious Email Reporting Service)
5 Report to Report Fraud at https://www.reportfraud.police.uk or call 0300 123 2040.

Red flags

⚠ An unexpected text or email says your streaming subscription payment failed and your account will be suspended — Netflix, Amazon Prime, Disney+, and Sky do not send urgent cancel-or-pay ultimatums by SMS
⚠ The link's domain is not the service's official site (netflix.com, amazon.co.uk, disneyplus.com, sky.com) — fake URLs use hyphens, random words, or are hosted on .vercel.app, .app, or lookalike domains
⚠ You are asked to re-enter your full credit card number, CVV, and expiry — legitimate billing updates happen inside the official app or website after you sign in normally
⚠ The message creates urgency — 'Your account will be suspended within 24 hours unless you update your payment details now'
⚠ The email originates from a Gmail, Outlook, or non-corporate domain rather than an official @netflix.com or @amazon.co.uk address
⚠ Streaming services say they will never ask for card details, passwords, or personal information by text or unsolicited email

Already happened to you? Do this in the next few minutes

What to do right now

Red flags

Sources