Fake Spotify emails target users in payment scam, warns single source
8 reported
A single-source report from The Guardian describes a scam involving fake emails that impersonate Spotify to steal login, personal, and payment details. The emails claim a payment could not be processed and direct recipients to a cloned site that collects their information. One victim, identified only as Barry, told The Guardian he clicked the link while distracted and was immediately hit with suspicious transactions. He said he uses virtual credit cards and was able to cancel the card and change his password to limit damage. The Guardian notes the emails are convincing replicas but contain telltale signs, such as not coming from an @spotify.com address. Spotify stated it will never ask for personal information via email and advised users to go directly to Spotify.com to make changes. The report is based solely on The Guardian’s article and cannot be cross-referenced with other sources.
What’s reported
The fake emails claim a payment could not be processed and ask recipients to update payment details.
Clicking the link leads to a cloned scam site that collects login, personal, and payment details.
A victim named Barry said he clicked the link while distracted and was hit with a suspicious credit card check and a Ticketmaster transaction for £469.22, which he declined.
Barry said he uses virtual credit cards and was able to cancel the card and change his Spotify password.
The fake emails include Spotify’s logo and color scheme but do not come from an @spotify.com address.
Spotify said it will never ask for personal information via email, including payment details, passwords, or government-issued identification numbers.
Spotify advised users to report fraudulent emails to their email provider and forward them to spoof@spotify.com.
Users who believe they have engaged with a suspicious email should immediately reset their Spotify password and review their account.
Key figures
Barry (victim, name changed)
Spotify spokesperson (unnamed)
Sources: The Guardian
