Remove “Spotify Can’t Process Your Payment” email

The “Spotify Can’t Process Your Payment” email is part of a phishing campaign that tries to steal users’ Spotify login credentials. The email claims that Spotify cannot process your payment for the Spotify Premium Family plan and asks that you double-check the payment details. The email links to a phishing site that asks you to log in to your Spotify account. If users type in their login credentials, they will be sent to the malicious actors operating this phishing campaign. Malicious actors would likely sell access to the account to people looking for cheaper premium Spotify subscriptions.

 

 

The “Spotify Can’t Process Your Payment” phishing email falsely claims that there is an issue and Spotify cannot process the payment for the Premium Family plan. While Spotify does notify users about payment issues, their emails do not resemble this phishing attempt. Users who have previously received legitimate emails will likely recognize the difference right away. The main goal of this phishing email is to steal users’ Spotify login information.

If you engage with this email, you will be redirected to a fake Spotify website that prompts you to log in to your account to supposedly update your payment details. If you enter your email and password, this information will be sent to the cybercriminals behind the phishing campaign. Stolen Spotify credentials can be misused in several ways. For instance, cybercriminals may take over accounts immediately by changing the email and password, which would prevent the legitimate user from accessing their account. Users who do not frequently use Spotify might not realize that they can’t access their account until some time has passed. If Spotify is unable to assist in recovering the account, the user may have to cancel their payment card to stop any unauthorized charges.

In some instances, instead of hijacking accounts, cybercriminals might sell the stolen account access to people seeking cheaper Spotify subscriptions. These users can use the stolen accounts until the original account holder discovers that their account is being accessed by someone else. This may take a while because it’s difficult to notice unauthorized activities on a music platform.

Below is the full “Spotify Can’t Process Your Payment” phishing email text:

Subject: We can’t process your payment

We can’t process your payment.

We’re having some trouble collecting your Spotify Premium Family payment. Please take a moment to review your payment details and double-check that there is money in your associated account. We’ll try to process the payment again in a few days.

UPDATE DETAILS

Spotify

Get Spotify for: iPhone iPad Android Other

How to recognize phishing attempts

Phishing scams that target multiple users at once are generally easy to spot. As long as users are careful with all unsolicited emails, they can identify them without much trouble. More sophisticated phishing emails are usually reserved for specific high-profile targets.

The “Spotify Can’t Process Your Payment” email is a pretty generic phishing email and has all the signs pointing to it being a phishing attempt. For starters, it comes from a dubious email address: norepls@vsz-hostetc.com. Since Spotify’s official emails are sent from addresses that include the company’s name, it’s clear this isn’t legitimate. More advanced phishing attempts might use addresses that seem more credible, but a quick Google search can help users verify an email address’s authenticity.

Spotify users should be able to tell right away that this email is a fake. Real Spotify emails always address the recipient personally using the name used when creating the account, whereas this phishing email does not address the user at all. Oftentimes, phishing emails address users using generic words like User, Member, Customer, etc.

The most telling sign of this phishing email is the URL linked within it. Clicking the “Update Details” button leads users to an obvious phishing site. Although the site is designed to look like Spotify’s login page, the URL itself is a giveaway. While malicious actors may create URLs that appear slightly legitimate, attentive users can easily spot the difference. Therefore, it’s crucial to always check the URL before logging in anywhere.

Remove “Spotify Can’t Process Your Payment” email

If you receive this “Spotify Can’t Process Your Payment” email, you can simply delete it from your inbox without paying attention to its contents. If you have typed in your login information on this phishing site, it’s important to log in to your Spotify account and change your password right away. If you are unable to access your account, reach out to Spotify for assistance in recovering it. If recovery isn’t possible, be sure to contact your bank to cancel your payment cards and prevent any unauthorized charges.