Tech experts are warning Netflix subscribers about a widespread cyber scam that seeks to steal sensitive financial information by sending fraudulent messages.

Security firm Bitdefender highlighted the growing prevalence of SMS “scare campaigns” aimed at Netflix customers, noting that while these scams vary in scale, they are becoming increasingly common.

The latest iteration of this scam, which began in September and continues to target users, involves cybercriminals sending fake SMS alerts claiming there is an issue with a Netflix account. These messages create a false sense of urgency, urging recipients to take immediate action.

One such alert reads: “NETFLIX: There was an issue processing your payment. To keep your services active, please sign in and confirm your details at https://account-details[.]com.”

Another common version warns users of a “failed payment” and includes links to phishing websites designed to steal login credentials, personal information, and credit card details.

Once this sensitive information is obtained, it is often sold on the dark web, where it can be exploited by various cybercriminal groups.

The scam has spread across 23 countries, including the United States, and takes advantage of Netflix’s lack of two-factor authentication, making it more susceptible to phishing attacks. Netflix’s reliance on only usernames and passwords makes users vulnerable to these types of digital infiltrations.

Cybersecurity experts emphasize that large companies like Netflix never reach out to customers through text messages, especially not with links requiring action. To protect themselves, customers should avoid clicking on suspicious links and instead manually enter URLs in their browsers.

In addition to the Netflix scams, experts also noted a surge in malicious apps targeting Android phones. Recently, McAfee identified 15 harmful apps that had been downloaded by over 8 million users, contributing to the growing global concern about cyber threats.

To stay safe, users are urged to remain vigilant and skeptical of unsolicited messages or requests for personal information.