The fraudster indeed could just forward the netflix mail using their own mail server. This is just standard phishing (when you log in to netflix, wouldn't you n

The fraudster indeed could just forward the netflix mail using their own mail server. This is just standard phishing (when you log in to netflix, wouldn't you notice it's not your account?)