Pay particular attention to the email address of the sender.

Look carefully at any messages you get that want you to take urgent action. Any attached file is almost certainly malware. The website will likely be a fake version of a legitimate website, designed to fool you into entering your username and password, or other personal information, so they can steal that information to use themselves. The message will include something you need to click on – a link to a website, or an attached file most commonly. The urgency is to get you to take the message seriously and also to get you to act on the message without thinking about it too much, consulting a trusted advisor, or looking into whether the message might be a fake. Something is going to be canceled, you’re going to have to pay some kind of penalty, or you’re going to miss out on some kind of special deal, and you have to act NOW.

The messages usually have a sense of urgency to them. The truly daring scammers may try to impersonate your boss or a family member. Could be your bank, the government, a service like Netflix or Spotify, a tech company like Microsoft, Amazon, or Apple, or some other service you recognize. The message or call will appear to come from a person or organization you trust. What they all have in common are: A trusted sender Most phishing attempts arrive via email, but they can also come via text messages, direct messages on social media, or even phone calls (what we call 'Vishing').

Spotify login scams