With its popularity as the world’s largest music and podcast platform, Spotify has unfortunately become a target for cybercriminals. Attempts to redirect users to scam sites through misleading playlists and spam podcasts have recently increased on the platform. So which method do fraudsters follow? Here are the details and things to watch out for…
Danger of fraud on Spotify: Beware of suspicious lists and Podcasts!
First, let’s talk about the scammers’ modus operandi. Some playlists on the platform are currently attracting users with enticing headlines like “Sony Vegas Pro 13 Crack” to get them to click on links. Spam podcasts with AI-generated audio messages are even promoting illegal content.
Cybercriminals create malicious content through third-party platforms (such as podcast hosting services like Firstory) and distribute it to Spotify and other streaming services. This process takes advantage of the lack of strict oversight at the publishing stage, making it easier for fraudsters to spread their content quickly.
Karol Paciorek, a cybersecurity enthusiast, noticed this security issue and warned about it on his X account. Spotify has since issued a statement saying it has removed the problematic content, but it is unclear whether a long-term strategy has been developed against such scams.
So what should users do?
Spotify users should be wary of links in suspicious playlists and podcasts. In particular, stopping and thinking twice before clicking on external links is one of the most effective ways to protect against such scam attempts. So, we advise you not to click on any link that looks out of the ordinary.