Be careful when activating your account if you’ve signed up for a streaming service, such as Netflix, Disney+, PBS Passport, or Hulu. Unfortunately, scammers are trying to steal login information and other personal data with fake websites that appear to come from the streaming service provider.
How the scam works
You purchased a subscription to a streaming service. To activate it, you need to log in on your web browser. A quick search reveals several links with the streaming service’s official name. You click on the first result.
However, the website doesn’t look quite right. For example, when you click the link, the site prompts you to update your web browser. Scammers have set up a lookalike website to trick you into downloading malware. If you click “Update” or any other button, you could download a virus that gives scammers access to your personal information. It’s best to close the page immediately.
Other times, when you click on the search result, you’re directed to a website that features your streaming service's official logo and branding. However, it looks a little (or sometimes a lot) different than what you remember. If you enter your user ID and password on a lookalike site, it goes to scammers' hands. These con artists then have the information they need to access your real account on the official website, and anywhere else you use that username and password.
How to avoid streaming service scams:
Always double-check that you are visiting an official website. Scammers can make fake websites look legitimate in search engine results, but they can’t copy a website’s official URL. Before you click on a website, look closely at the URL. Check that it is spelled correctly. Scammers hope you’ll overlook this and click without a second thought.
Be wary of ads and sponsored links. Sometimes scammers use ads to get their lookalike website to appear first in the search results. Remember, just because a website is at the top of the list doesn’t mean it’s the official website.
Be careful with your login information. Ensure you are on an official website before entering your username and password. Never enter this information into third-party websites. Keep in mind that legitimate customer service representatives generally do not ask for passwords over the phone or through email.
If you’ve been the victim of a scam, report it on BBB Scam Tracker at www.bbb.org/scamtracker. Your report can help expose scammers’ tactics and protect others from falling prey to the same con.