{"id":711655,"date":"2026-07-26T07:34:10","date_gmt":"2026-07-26T07:34:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/711655\/"},"modified":"2026-07-26T07:34:10","modified_gmt":"2026-07-26T07:34:10","slug":"i-never-thought-id-fall-for-a-scam-the-fake-spotify-emails-that-put-you-at-risk-of-fraud-money","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/711655\/","title":{"rendered":"\u2018I never thought I\u2019d fall for a scam\u2019: the fake Spotify emails that put you at risk of fraud | Money"},"content":{"rendered":"<p class=\"dcr-1s160rg\">You have had a <a href=\"https:\/\/www.theguardian.com\/technology\/spotify\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\" rel=\"nofollow noopener\" target=\"_blank\">Spotify<\/a> account for years and your credit card is linked for the monthly payments. When an email arrives telling you that your payment couldn\u2019t be processed you are not surprised as the expiry date on the card is soon.<\/p>\n<p class=\"dcr-1s160rg\">\u201cWe encountered an issue while processing your recent payment,\u201d it says. \u201cTo keep your access active and avoid interruption, please review and update your information.\u201d<\/p>\n<p class=\"dcr-1s160rg\">All you need to do, according to the email, is click the button to \u201cupdate payment method\u201d. \u201cThis only takes a moment and helps ensure uninterrupted access to your account and services.\u201d<\/p>\n<p class=\"dcr-1s160rg\">When you click the link you are taken to what you think is Spotify and you are asked to log in and then enter your new card details, your address and phone number.<\/p>\n<p class=\"dcr-1s160rg\">Unfortunately, the email is not from Spotify and the link takes you to a cloned scam site that collects your login, personal and payment details, which criminals then immediately try to use for online purchases.<\/p>\n<p class=\"dcr-1s160rg\">\u201cI saw the email on my phone while I was having a conversation and watching the tennis so just tapped the link to update the card without thinking about it,\u201d said Barry*, who contacted the Guardian after falling victim to the scam. \u201cI was immediately hit with a suspicious credit card check for \u2018Tm Connect\u2019 followed by a Ticketmaster transaction in US$ for a sum equivalent to \u00a3469.22, which I declined.\u201d<\/p>\n<p class=\"dcr-1s160rg\">\u201cI never thought I would be the kind of person to fall for a scam and I am exactly the kind of person to judge those who do. Luckily I use virtual credit cards for online subscriptions, so I could quickly cancel the card and change my unique Spotify password to limit the damage.\u201d<\/p>\n<p>What it looks likeThe scam email looks convincing at a glance, but look closely and you will spot inconsistencies that give the game away, such as an unknown sender and lower-case subject. Composite: Samuel Gibbs\/The Guardian<\/p>\n<p class=\"dcr-1s160rg\">The fake emails are a convincing replica of Spotify\u2019s email notifications, including the company\u2019s logo, the correct colour scheme and MySpotify name on the email.<\/p>\n<p class=\"dcr-1s160rg\">Small telltale signs show the email is not legitimate, such as not including the tier of your Spotify subscription and using all lower-case letters for the email subject line.<\/p>\n<p class=\"dcr-1s160rg\">But the biggest give away is that the email does not come from an @spotify.com address and clicking the button takes you to a random site not using the spotify.com domain.<\/p>\n<p>The site you end up at also looks convincing on first look, but the URL is not a Spotify.com domain. Composite: Samuel Gibbs\/The GuardianWhat to do<\/p>\n<p class=\"dcr-1s160rg\">If you receive an email like this, even if you are expecting to change your payment details in the near future, do not click the links. Go direct to Spotify and log in on Spotify.com to make any changes when necessary.<\/p>\n<p class=\"dcr-1s160rg\">\u201cSpotify takes the protection of users very seriously,\u201d said a company spokesperson. \u201cWe will never ask for personal information via email, including payment details, passwords, or government-issued identification numbers. We will also never request payments through third-party services or ask users to download files or software from our emails.\u201d<\/p>\n<p class=\"dcr-1s160rg\">Check the email headers and URL links to <a href=\"https:\/\/support.spotify.com\/uk\/article\/spotify-email-legit\/\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">ensure they are from the Spotify.com<\/a> domain. Report the fraudulent emails to your email provider and forward it to Spotify at <a href=\"https:\/\/www.theguardian.com\/money\/2026\/jul\/26\/mailto:spoof@spotify.com\" data-link-name=\"in body link \" https:=\"\" rel=\"nofollow noopener\" target=\"_blank\">spoof@spotify.com<\/a>.<\/p>\n<p class=\"dcr-1s160rg\">\u201cIf anything about the message seems unusual, do not respond, click any links or download any attachments. Users who believe they may have already engaged with a suspicious email should immediately reset their Spotify password and review their account for any unauthorised changes,\u201d Spotify said.<\/p>\n<p class=\"dcr-1s160rg\">If you believe your payment details have been compromised, contact your bank immediately.<\/p>\n<p class=\"dcr-1s160rg\">Spotify has various tools to recover accounts, lost playlists and other data. You can prove your ownership of the account with a <a href=\"https:\/\/support.spotify.com\/uk\/article\/hacked-account-help\/\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">screenshot of a Spotify receipt or bank statement<\/a>.<\/p>\n<p class=\"dcr-1s160rg\">* Name has been changed<\/p>\n","protected":false},"excerpt":{"rendered":"You have had a Spotify account for years and your credit card is linked for the monthly payments.&hellip;\n","protected":false},"author":2,"featured_media":195681,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[84,59,56,54,55],"class_list":["post-711655","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-gb","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/711655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=711655"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/711655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/195681"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=711655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=711655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=711655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}