Cybercriminals Target Streaming Services, Payment Platforms Amid Shift in Fraud Tactics, Kaspersky Report Reveals

Cybercriminals are increasingly targeting streaming services and digital payment platforms, expanding beyond traditional banking and e-commerce fraud, according to Kaspersky’s *Financial Cyberthreats in 2025 and the Outlook for 2026* report. The study found that Netflix was the most spoofed brand in online purchase scams in 2025, with 28.42% of detected cases, while Mastercard led in phishing attacks at 33.45%, surpassing Visa and PayPal.

Why Cybercriminals Are Targeting Streaming Services

The shift reflects the widespread adoption of digital platforms, which users interact with daily, making them prime targets for phishing. “Cybercriminals exploit the trust users place in familiar brands, leveraging their everyday presence to trick victims into clicking malicious links or sharing credentials,” said Polina Tretyak, a Kaspersky Digital Footprint Intelligence analyst.

Netflix’s dominance in spoofing cases highlights the appeal of streaming services, which require account logins and payment details. Similarly, payment systems like Mastercard and Visa remain attractive due to their global reach and the financial data they handle.

Regional Variations in Phishing Tactics

The report underscores regional differences in fraud trends. In Europe, Spotify was the most imitated brand, while Netflix led in the Middle East. In the Asia-Pacific region, Apple faced the highest number of fake websites. These variations indicate attackers tailor campaigns to local digital habits, maximizing their chances of success.

Payment Platforms Remain High-Value Targets

Despite a decline in PayPal’s phishing share—from 37.53% in 2024 to 14.10% in 2025—payment systems continue to draw cybercriminals. Mastercard’s rise to the top of phishing lists suggests a growing focus on mass-market credit and debit networks, which offer broader financial access.

What Users Should Do to Protect Themselves

Kaspersky advises users to verify website URLs, avoid clicking on unsolicited links, and enable two-factor authentication. “The key is to recognize that even trusted brands can be mimicked,” Tretyak said. “Always double-check the legitimacy of requests for personal or financial information.”

Looking Ahead: The Future of Cyber Threats

As digital ecosystems grow, so do the risks. The report warns that attackers will likely continue targeting platforms with high user engagement, such as social media and cloud services. Organizations must prioritize cybersecurity measures, while users should stay vigilant against evolving phishing techniques.

*Sources: Kaspersky’s *Financial Cyberthreats in 2025 and the Outlook for 2026*; Polina Tretyak, Kaspersky Digital Footprint Intelligence.*