Fake Spotify emails sent through BillGrid

On October 2 and 3, 2026, someone opened a BillGrid account and misused our client email feature to send fake emails that pretend to come from Spotify. If you received one, it did not come from Spotify or from BillGrid, and you can safely delete it.

How to recognize it

• The subject is “Your Premium Subscription Requires Attention” or “Important Update Regarding Your Account”.
• It says your Spotify Premium subscription requires your attention, shows the Spotify logo and has a “Review Information” button.
• It was sent from billing.spotify@mail.billgrid.com or billing.service.inc@mail.billgrid.com. BillGrid customers' real invoices now all come from billing@mail.billgrid.com with the business's name in front (“Acme Studio via BillGrid”), so check the subject and content, not just the address.

What to do

• Don’t click the button or reply. Delete the email, or mark it as phishing in your email app.
• If you clicked the button and entered anything on the page it opened, change your Spotify password, and change it anywhere else you use the same password. If you entered card details, contact your bank.
• Spotify explains how to spot fake emails on its support page about suspicious emails.

What we have done

• We closed the account on October 3, and it can no longer send email.
• We blocked the network address it was sent from.
• We reported the emails to Spotify, to the company hosting the fake page, to Google and to the Anti-Phishing Working Group.
• We are adding limits so a new account can’t send email like this again.

The sender used their own account. We have found no sign that they got into any other BillGrid account or into BillGrid’s systems.

Questions

Email support@billgrid.com or contact us.