[Subscription][Security] Re-enter Payment Details to Upgrade to Family

Once hackers get access to my Spotify account, they will change my regular Premium subscription to Premium For Family and add strangers to my plan.

 

I will be charged $5 extra each month!

 

Spotify does NOT require to enter my credit card number to change the subscription type, which leaves the risk to users.

 

It means hackers NOT ONLY have stolen Spotify accounts, but also have stolen stored payment method to pay for family plans.

 

But in France and the UK, Spotify requires to enter the credit card number to change the subscription type to a Family plan. (free Google home mini was the reason why Spotify start asking for re-enter credit card info, but the offer has ended, Spotify no longer ask for re-enter card info...)

 

Idea: Please ask users to re-enter card number when changing regular Premium to a Family plan. Just like what Spotify did in US/UK/FR markets when free Google Home minis were giving to family owners for free. So hacked users won't be charged unauthorized money when hackers upgrading their plans to the family plan using stored payment method.

 

Updated on 2019-11-27

Hi everyone.

As this idea was posted a while ago now, we’d like to provide an update.

 

While, for obvious reasons, we can’t go into too much detail, in the last six months we have introduced additional improvements. This includes, for example, a change in how email notifications and invites work.

Additionally, we continue to look into more and better ways to provide our users with the best possible, and safe experience.

 

When ideas are posted to the community the ideal outcome is to have it transition into the Implemented status. When we mark an idea as Implemented we will provide details about what we’ve done.

The very nature of this idea, however, would preclude us from doing so. 

In other words: this is important to us, we would like everyone who wants to, to keep voting on this idea; as you know votes show us how important something could be.

 

In conclusion: for all intents and purposes we have to change this idea’s status to Not Right Now.

If you'd like further information about protecting your account please visit our Support Site.

Comments
Newbie

It must be implemented. Switching plans without authorization is a violation of my right.

Rock Star 17
Rock Star 17
Status changed to: New Idea

Updated on 2019-04-21

Marked as a new idea and edited the title slightly 🙂

Newbie

Great idea

Newbie

Hacker had switched my plan to family and add strangers to it

Newbie

I am suprised that other people can use my stored payment method to pay for family plan, which is not the deal I agreed to.

Newbie

I received a phishing email asking for my Spotify credentials.

 

AFTER A FEW MINUTES, I RECEIVED THE CONFIRMATION SAYS "Welcome to Family" and then my email address was changed, Spotify kept charing 15 dollars per month until I contact Spotify Support to reset my password.

 

What a shame

Newbie

My friend's Spotify was hacked and someone changed his individual Premium to Family plan and add someone he does not recognize to the family. So freaky

Newbie

If Spotify puts users in danger, I will certainly not subscribe to Premium

Newbie

It is a major step for security. Spotify please implement it!

Casual Listener

My friend's account got stolen and after he reset the password via Spotify Support, he founds strangers in his family.

 

So horrible