Back to The Local Vocal
The Local VocalHigh
PhishingNetflix
Email
High risk PhishingEncountered ViaEMAIL 30 September 2026
RegionOtagoNationwide

Dodgy billing email doing the rounds

A phishing email with the subject "important notice" is circulating across NZ, posing as a billing update and pushing you to click through to update payment details.

You might receive an email with the subject "important notice" from flyonwallstreet.com, dressed up like a routine billing problem from a service provider. The message says there is an issue with your current billing information and urges you to click an "update account now" link to fix your payment details before another charge attempt fails.

What makes this one tricky is that the sending domain can appear technically legitimate to mail systems, even though the message content does not match the sender's identity. The domain itself is not newly created and has a clean history, which helps it blend in, but that does not make the email trustworthy. If the branding, payment request, or destination page does not line up with an organisation you actually deal with, treat it as suspicious.

The attacker is trying to get you to hand over payment details, account credentials, or both through a fake account update page. If you click and follow through, you could give criminals access to your account or expose card details that can be used for fraud. A message that looks clean at the email gateway can still be a phishing lure.

This campaign has been observed across multiple organisations in the last day, which means you should expect similar messages to keep circulating. If you receive a billing update you were not expecting, go to the provider's official website yourself rather than using the link in the email.

Email authorisation
SPF
Pass
DKIM
Pass
DMARC
Pass
COMPAUTH
Pass
Sender Domain Intelligence

The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.

Sender domainflyonwallstreet.com
Age2395 daysEstablished
Registered04/03/2020
ReputationCleanscore 0
Email Sample
Source
Decision1
Recommended Action

Practical steps you or your IT provider can take to reduce the risk from this kind of threat.

  • Check: Verify any billing problem directly through the supplier's official website or known phone number, not the link in the email.
  • Do not: Click "update account now" or enter payment details or passwords after following an unexpected billing email.
  • Check: Compare the sender, branding, and linked website carefully. If they do not match the organisation you actually use, treat it as phishing.
  • Report: Report the message to your IT provider or security team and warn staff that similar billing lures are circulating.
  • Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
Netflix logo
Is it real?
Got an email from Netflix?

See what a genuine Netflix message looks like, the real sender domain, the real link destination, and where to report a fake.

Check the real thing