← All companiesStreaming & gaming#133 most impersonated

HBO Max scams

Last updated September 18, 2026

The short answer

HBO Max scams are payment-failure emails that link to a card-capture page, and cheap "lifetime" subscriptions sold on social media that are simply stolen accounts. Check billing by signing in at max.com — never through a link.

Streaming subscription phishing works on arithmetic. A payment-failure email asks you to re-enter a card for an amount you genuinely pay every month, which is small enough to handle without thinking. The brand's repeated renaming — HBO Now, HBO Max, Max, and back — helps the scammers too: subscribers are used to the service changing its name and its emails, so an unfamiliar-looking message is not itself suspicious.

How HBO Max scams work

  1. 1

    Payment failure emails

    A message says your payment method was declined and your subscription will be cancelled, linking to a page that captures the card.

  2. 2

    Cheap subscription resale

    Social posts and marketplaces offer a year or "lifetime" of HBO Max for a few dollars. These are credentials from accounts taken over elsewhere. Access stops when the real owner resets the password, and there is nobody to complain to.

  3. 3

    Fake cancellation and refund calls

    A caller offers to cancel a subscription and process a refund, requesting bank details or remote access.

  4. 4

    Credential stuffing

    Reused passwords from other breaches are tried against Max accounts, and successful logins are sold in bulk.

Warning signs

  • An email says your payment failed and links to a payment page
  • The domain is not max.com
  • A subscription is offered far below the real price
  • A seller asks you not to change the password on an account you "bought"
  • A caller offers to cancel and refund a subscription
  • The email greets you generically rather than by name
  • Profiles appear on your account that you did not create

Examples

The $15.99 that cost $900

An email reports a declined payment for the monthly subscription and links to a convincing update page. The card entered is used for $900 of purchases over two days. The real subscription was never in arrears.

Lifetime for $4

A social post sells lifetime HBO Max access for $4. The buyer gets credentials that work for eleven days, until the real owner — whose account was taken over through a reused password — resets it. There is no refund and nobody to ask.

What to do

  • Check billing by signing in at max.com yourself.
  • Never buy streaming subscriptions from social media or marketplaces.
  • Use a unique password and turn on two-factor if offered.
  • Check your profile list for users you did not add.
  • If you entered a card on a fake page, cancel it and dispute any charges.

Report it to HBO Max

Report phishing through help.max.com and check real billing by signing in at max.com.

Getting your money back

Cancel any card entered on a fake billing page and dispute the charges, which are covered as fraudulent. If your account was taken over, change the password, remove unfamiliar profiles and devices, and change that password anywhere it was reused — credential stuffing works because passwords repeat. Money paid for a resold subscription is not recoverable and disputing it is awkward, since you knowingly bought something for a fraction of its price.

Frequently asked questions

Does HBO Max email about failed payments?

Real billing messages exist, which is why the fakes work. Never use the link: sign in at max.com and check the billing page. A genuine problem is visible there, and a fake one is not.

Why are cheap streaming subscriptions on social media a problem?

Because they are stolen accounts — usually taken over using passwords reused from other breaches. Access ends when the owner resets the password, there is no refund, and buying them sustains the account-theft market that made them available.

Someone unfamiliar is on my streaming account. What now?

Change the password, remove the profile, and sign out of all devices from the account settings. Then change that password anywhere else you used it, because a shared password is almost certainly how they got in.

Other companies scammers impersonate

Scams reuse their scripts across brands. If you were contacted about HBO Max, these are the guides worth reading next.