(Note that the above steps don't include any 'password reset' step for Jim to access the account that's because the email from Netflix includes authenticated links that won't ask for it.

Use Netflix free forever with Jim’s card **** 1234!.

Change the email for the Netflix account to kicking Jim’s access to this account.

Hope Jim reads the email to james.hfisher, assumes it’s for his Netflix account backed by jameshfisher, then enters his card **** 1234.

Then Netflix emails james.hfisher asking for a valid card.

Wait for Netflix to bill the cancelled card.

After Netflix applies the “active card check”, cancel the card.

Sign up for free trial with a throwaway card number.Create a Netflix account with address james.hfisher.Let’s say you find the victim jameshfisher. Hammer the Netflix signup form until you find a address which is “already registered”.More generally, the phishing scam here is: I think it's likely that someone is trying to trick you into paying for Netflix for them. So is this just a mistake on somebody's part, mistyping an email address (although it's surprising that Netflix accepted it with no verification), or something more sinister? I also checked the headers of the emails carefully and they were sent by Netflix. I don't see how this could possibly be a phishing attempt - I carefully checked that I was on the real Netflix site, used a throwaway password not used on any other sites, and did not enter any of my personal information. The 'come back to Netflix' emails are still coming in occasionally. I didn't, of course, and then they changed to 'your account will be suspended' and then 'your account has been suspended'. Soon the emails from Netflix started to ask me to update payment information. The account appeared to be from Brazil, with some watch history but no other personal details stored and no payment information. Using the 'forgotten password' option I was able to get a password reset email, change the password and log in. This was addressed to someone with a different real name, with that name not similar in any way to the Gmail name.Īfter a few of these messages I decided to investigate by going to Netflix and trying to log in with that email address. Suddenly I started getting email to this Gmail address from Netflix - not a 'Welcome to Netflix' email or one requesting address verification, but what looked like a monthly promo for an existing account. I have a Gmail address which I have never used for public communication.

I don't have a Netflix account and never have done. I don't know if it is a hack attempt, although I can't think of any way that there could be any danger or any personal information gained. This is something that happened to me a few months ago.

Dot trick gmail paypal