DNSC warns users / Fake Netflix messages attempt to steal card details

The National Directorate for Cyber Security (DNSC) warned on Thursday of a new online fraud scenario reported by users in Romania. Attackers are using Netflix’s visual identity and name to obtain victims’ banking details.

Users receive fraudulent messages that appear to have been sent by Netflix and are informed that their subscription payment could not be processed. To prompt them to act quickly, the messages warn that their subscription or account could be suspended if the requested amount is not paid.

The link included in the message redirects the victim to a fake website that imitates the platform’s official page. There, bank card details are requested, and the information entered may reach attackers and later be used for fraudulent transactions.

DNSC recommends that users not access links received through unsolicited messages and instead manually enter the desired website address in their browser. Users should be alert to messages that create a sense of urgency or fear, including threats concerning account suspension, and should never send banking details by SMS or through links received in such messages.

People who have already provided their card details are advised to contact their bank immediately to block, if possible, fraudulent transactions.