“Subscription canceled”: Fake emails from streaming service in circulation

Spread the love

Read Time:1 Minute, 57 Second

Criminals are trying to lure their victims to a fake login page with an email purporting to be from Disney+. How to recognize the scam.

After Netflix and Amazon Prime, Disney+ is the third most popular streaming provider worldwide, with almost 125 million subscriptions (as of the beginning of 2025). An immense number of potential phishing victims. The website watchlist-internet.at is currently warning of a scam. Criminals are sending out fake emails claiming that Disney subscriptions have been canceled. However, it can be reactivated simply by re-entering the payment information. In reality, the criminals behind the scam are misusing the captured credit card details.

This is how the scam works
The fraudsters send emails in the name of Disney+. The content: The victim’s subscription has allegedly been canceled due to a payment method that is no longer valid. The message contains a button labeled “Access my account”. If you click on it, you are redirected to a fake Disney login where you are asked to log in with your details. The next step is to enter the credit card details again. “You should definitely stop at this point at the latest! Although the fraudsters can already access your Disney+ account, a means of payment has not yet been shared,” warns watchlist-internet.at.

How to recognize a phishing attempt
The criminals behind the scam go to great lengths to make their fake portals and emails appear as official as possible. To do this, they use the logo and other components of the “real” website or the “real” provider. However, if you know what to look for, spotting the fakes is quite easy.

How to recognize scam emails
Email address: At first glance, the sender of the phishing email looks legitimate. Who would suspect fraud at first glance with “MyDisney+”? However, this is only the freely selectable name of the email account holder. The actual address can only be seen by clicking on this name, which has nothing to do with Disney.

Internet address: Clicking on the link in the e-mail takes the victim to the website meinkontodisney.de. However, the official site can always be reached at disneyplus.com, and the German-language version is at disneyplus.com/en-at. As similar as they may sound, all other versions are fake sites.