[TenFour]

I don't understand how this would work. Don't you have to login to Netflix using both your username (presumably the email address with the dots), AND your password in order to change your credit card details? In other words, the scammer can add some dots to use your email address to create the account, but unless they have your password how could they trick you into logging in and giving up your credit card details? So, I suppose you could potentially go through the password reset process, but then if you do that how would the other person be able to access the account to get or use your credit card? Still, the lesson is to never login to any payment site just using a link from within an email anyway. You should always open another browser tab and login in directly for many possible security reasons.