Remove “Resume your Spotify Premium Today” email

The “Resume your Spotify Premium Today” email is part of a phishing campaign that aims to steal users’ Spotify login credentials. The email claims that the recipient’s Spotify Premium is currently paused because the payment info needs to be updated. The email asks that the recipient update their billing details to continue using the music streaming service. If recipients were to click on the provided link, they would be taken to a phishing site that asks users to log in to their Spotify accounts. If users type in their credentials, they will be stolen by the malicious actors operating this phishing campaign.

 

 

The “Resume your Spotify Premium today” email is part of an ongoing phishing campaign that specifically targets users’ Spotify login credentials. The email is made to look like a notification from Spotify, supposedly informing recipients that there was an issue with their billing details. Initially, the email looks like the standard notification Spotify sends to users when there are payment issues, but on closer look, it becomes clear it’s a phishing attempt.

If you interact with the email, specifically if you click on the “Update Billing Info” button, you will be redirected to a fake Spotify website that asks you to log in to your account to supposedly update your payment information. Entering your email and password could lead to these credentials being stolen by the cybercriminals behind the phishing campaign. Stolen Spotify accounts can be exploited in various ways. For example, criminals may quickly take control of the account by changing the email and password, ultimately locking the legitimate user out. Users who don’t regularly use their Spotify account might not notice the hijacking until some time has passed. If Spotify cannot help recover the account, the user might have to cancel their payment card to prevent any unauthorized charges.

In some cases, rather than hijacking accounts, cybercriminals might choose to sell access to the stolen accounts to users looking for cheaper Spotify subscriptions. These unauthorized users can use the compromised accounts until the original owners recognize that their accounts are being accessed by someone else. This can take time, as unauthorized activities on a music platform can be hard to detect.

The full “Resume your Spotify Premium today” email is below:

Resume Your Spotify Premium Today

Dear Loyal Customer

Your Spotify Premium is currently paused because your payment info needs an update. Take a moment to update your billing details so you can dive back into your music and podcasts without missing a beat.

Update Billing Info

Have any questions? Reply to this email, and we’ll sort it out together.

Sincerely,

Get Spofity for: iPhone|iPad|Android|Other

This message was sent to you. If you have questions or complaints, please contact us.

Terms of Use|Technical requirements|Contact Us

Spofity, Regeringsgatan 19, 111 53, Stockholm, Sweden

How to recognize phishing attempts

Phishing scams that target many users at once are typically easy to recognize. Users can identify them with relative ease as long as they remain cautious with unsolicited emails. More sophisticated phishing attempts tend to target specific high-profile people, so regular users are relatively safe.

The “Resume your Spotify Premium today” email is a very obvious phishing attempt. For one, it is sent from a questionable email address made up of random characters—unlike legitimate Spotify emails, which come from addresses ending in the company’s name. When email addresses look random, do not engage with the email as it is likely malicious. You should be cautious even if the address looks professional, as malicious actors use various tactics to make their email addresses as professional-looking as possible. To confirm the legitimacy of an email address, a quick Google search can be helpful, especially for more advanced phishing tactics that might use seemingly credible addresses.

Spotify users should be quick to identify this “Resume your Spotify Premium today” email as phishing because it addresses them as “Loyal Customer”. Legitimate Spotify emails always address the recipient by the name associated with their account, whereas this phishing email fails to do so. Instead, they often use generic terms like User, Member, or Customer, as is the case with this phishing email.

Grammar and/or spelling mistakes are also common in phishing emails. While it’s not immediately noticeable, Spotify is mispelled as “Spofity” two times in this “Resume your Spotify Premium today” email, which would not happen in a legitimate email from Spotify.

The most telling red flag in this phishing email is the URL of the linked site. Clicking the “Update Billing Info” button directs users to an obvious phishing site. Even though the site mimics Spotify’s login page, the URL reveals the phishing attempt. Although cybercriminals may create URLs that look somewhat legitimate, vigilant users should be able to distinguish the differences. Therefore, it’s essential always to examine the URL before entering login credentials anywhere.

Remove “Resume your Spotify Premium today” email

If you get this “Resume your Spotify Premium today”, delete it without worrying about what it says. If you’re worried about real billing issues, access your account manually instead of clicking on the link. If you’ve entered your login details on a phishing website, change your Spotify password immediately. If you can’t access your account, try all available account recovery options. If recovery isn’t possible, make sure to notify your bank to cancel your payment cards and stop any unauthorized transactions.