[leddt]

I don't see the scam here. If you have to go through password reset to get into the account and update the CC number, then the would be scammer does not have access to that account anymore (assuming Netflix logs you out of other devices when you change your password).

Sure, you end up paying for an account you don't use, but nobody gains from that (other than netflix). It certainly is an issue that can easily be fixed by netflix validating email addresses, but I don't see any incentive for scammers abusing it.

[ScottEvtuch]

I was thinking the same thing. This isn't really a viable scam unless maybe Netflix offers multiple ways to reset your password, which isn't addressed in the article. Maybe a text message reset is possible?