Many long-term Spotify users are being targeted by sophisticated phishing emails that claim there is an issue with their subscription payment. These messages, which often arrive when a user might expect a card update, state: “We encountered an issue while processing your recent payment,” and urge the recipient to “update payment method” to ensure their service is not interrupted.
One victim, identified as Barry, shared his experience after clicking a link in such an email while distracted. He was immediately met with a suspicious credit card authorization for “Tm Connect,” followed by a unauthorized Ticketmaster transaction equivalent to £469.22. Barry noted that he managed to limit the damage by using virtual credit cards, which allowed him to cancel the compromised card and reset his account credentials quickly.
The scam emails are designed to look like legitimate notifications, featuring the official Spotify logo, the company’s branding, and the name “MySpotify.” However, security experts point out that the primary indicators of fraud are the sender's email address, which does not originate from an “@spotify.com” domain, and the destination URL, which directs users to a site outside of the official spotify.com network.
A spokesperson for Spotify emphasized that the company takes user protection seriously and will never request personal information, such as passwords, payment details, or government-issued IDs, via email. Furthermore, the company stated it will never ask for payment through third-party services or require users to download files from email attachments.
