The dots do matter: how to scam a Gmail user
 

An interesting read for Gmail users:

https://jameshfisher.com/2018/04/07/...mail-user.html

Interesting. Netflix really should require the email address to be verified, most other sites do. Gmail, unfortunately, seem to be a law unto themselves. My bank started using my Gmail address to correspond with me. I had never given it to them or anyone else, I don't use it.

I don't understand how this would work. Don't you have to login to Netflix using both your username (presumably the email address with the dots), AND your password in order to change your credit card details? In other words, the scammer can add some dots to use your email address to create the account, but unless they have your password how could they trick you into logging in and giving up your credit card details? So, I suppose you could potentially go through the password reset process, but then if you do that how would the other person be able to access the account to get or use your credit card? Still, the lesson is to never login to any payment site just using a link from within an email anyway. You should always open another browser tab and login in directly for many possible security reasons.