A fake Spotify email says your Premium is cancelled and pushes a Retry Payment button that leads to a page built to steal your login and card.
An email pretending to be Spotify is telling people their Premium subscription is cancelled because of a payment problem. It is a scam. Spotify did not send it. The button in the message opens a fake Spotify sign-in page that collects your password and card details. It was first seen on October 15, 2026.
The version described by the security site PCRisk uses the subject "Update Billing Details" and opens with "Dear Customer". It says the cancellation of your Premium plan is confirmed and warns that you will soon lose access. It then asks you to log in through a RETRY PAYMENT button. It is signed "The Spotify Team". PCRisk says the sender has no connection to Spotify's official domains.
Other versions exist. MailGuard, an Australian email security company, described one on May 21, 2026 that gave readers 48 hours to update billing details. The wording changes. The trick stays the same.
Spotify's own help page says a failed monthly payment does not end Premium right away. Spotify tries to take the payment again over the next few days. So the "lose access today" pressure is a warning sign in itself.
The help page also never tells you to click a link in an email. The US Federal Trade Commission says the same about all companies: a real one will not email or text you a link to update payment information. A real billing problem and a fake email can land in the same week, so judge the email by where it sends you, not by whether the story fits your life.
Reading the email does not infect your phone or computer. The harm happens only on the page the button opens. If you deleted it or never clicked, nothing has been taken. If you clicked but typed nothing, you are in a similar position. The risk is highest for Spotify users who paid by card or automatic bank debit and entered details on the fake page, or who reuse their Spotify password on other sites.
The steps in the alert box above cover what to do now. These are the signs that give the fake away:
No one has published figures on how many people received the email or lost money. Security write-ups are still limited. One report names a fake page address, but scammers change addresses often, so that address is not a reliable way to spot the scam. The email has no known Microsoft detection name because it installs nothing by itself.
Never fix billing through an email link. Open the Spotify app or type spotify.com yourself, and change your password if you already entered it.
Fake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourselfMorristown police say scammers posing as bank staff are pushing people to withdraw cash, which is very hard to get back once it is handed over.
Read more: Morristown police warn of scam where fake bank staff ask for cashA viral ChatGPT prompt turns what the chatbot remembers about you into a room image. Posting it publicly could give scammers clues to target you.
Read more: Viral ChatGPT room image could hand scammers clues about you
