Nova Scotia·CBC Investigates

If you see strange charges from Spotify on your bank account, you aren't alone

Several Canadians are in the process of retrieving money removed from their bank accounts this past weekend by Spotify, a music streaming service to which they did not subscribe.

Spotify told people who didn't have an account that someone else was using their payment information

Danielle Parent's chequing account was in overdraft after Spotify charged the Toronto resident $479.52 in four separate transactions. (Submitted by Danielle Parent)

Danielle Parent has never had a Spotify account, but on the weekend noticed four unauthorized withdrawals of $119.88 each for the music streaming service.

Parent, a graphic designer based in Toronto, is one of a number of Canadians who say they had money removed from their chequing accounts for the service to which they do not subscribe.

In total, Spotify charged Parent $479.52. It put her in overdraft and left her with no cash for groceries over the weekend. 

"I kind of expect fraudulent charges to maybe happen on a credit card, but to have a direct charge on a chequing account was very shocking," she said.

Parent reported her concerns to her bank, TD, and the representative flagged the activity as fraudulent. She said she picked up a new debit card, and was told the bank was investigating and aware of similar problems involving other clients.

"If someone had access to my chequing account, wouldn't they drain my money, wouldn't they be making other purchases? Why just Spotify?" 

Not clear how many people are affected

In a statement to CBC News, a TD spokesperson said the company is looking into the issue with Spotify and Visa debit, and is working with its customers to reverse unauthorized charges.

The bank would not disclose how many customers are affected. It's unclear if customers from other banks are also having the same experiences.

CBC contacted Spotify three times since Monday, but did not hear back until Thursday evening.

Parent says she checks her bank account frequently, but is concerned for people who may not do the same. (CBC)

The charges "stemmed from an attack targeting debit cards in Canada," a spokesperson said via email, and were not associated with Spotify itself. 

The company said it is providing refunds and investigating. "Spotify takes fraudulent activity on our service extremely seriously," the statement said. 

Spotify did not say how many people have been reimbursed or what is being done to prevent a recurrence.

'I was so angry, I was shaking'

Brenda Hawboldt, who lives in Sydney, N.S., faced the same challenges this past weekend as Parent did. 

Hawboldt was trying to buy a few things at a convenience store, but her debit card kept showing insufficient funds. She checked her account at home and saw three charges of $119.88 to Spotify, despite having never signed up for the service.

Her card, like Parent's, is a Visa Debit, meaning it can be used for online purchases and the funds will come out of her chequing account as they typically would with an Interac card. Both women say they have never used their debit cards online. 

"I was so angry, I was shaking," Hawboldt said. "It's scary how easy it happened."

She said the only alert she got regarding her account was an insufficient funds message, a red flag that something went wrong.

A customer support representative from Spotify told Brenda Hawboldt the company has blocked accounts that were using her payments details. (Submitted by Brenda Hawboldt)

Hawboldt also called TD and received a code for each transaction. The bank directed her to email Spotify that information. Her money was refunded midday Monday.

Someone at Spotify's customer service department emailed Hawboldt saying she wouldn't "have to worry about any unauthorized charges originating from that Spotify account.

"We were able to find the accounts (sic) that was using your payment details and have consequently blocked it," the email said.

Spotify did not respond to requests for comment by CBC News. (Reuters)

Hawboldt said she wasn't satisfied with Spotify's response and still has questions about how her bank number was accessed. 

"Nobody has explained it, even TD. I asked TD, 'How did this happen? What can I do to protect myself?' The only option they gave us was to go in and change our debit cards," Hawboldt said. 

Parent was also in touch with numerous representatives from Spotify. One sent her an email with the same wording that Hawboldt received. The company does not offer customer service by telephone.

Past Spotify problems

This isn't the first time people have raised concerns about the music streaming service.

In 2016, many Spotify users complained strangers were using their accounts or changing their login details. The company denied it had been hacked. It also denied being hacked in a 2015 incident when the information of more than 1,000 users was leaked online.

There are also similar accounts of unauthorized billing posted on Spotify's community forums by users who have questions about unauthorized withdrawals. Some of the posts date back years.

Parent was reimbursed Tuesday afternoon and still has questions about how her complaint was handled. She said it doesn't make sense that people in different parts of the country are experiencing the same problem. 

"Why would a company allow you to purchase four yearly accounts under the guise of one account? That should have been flagged as suspicious on their end to begin with," she said.

"I worry about senior citizens, etc., who maybe don't check their accounts as regularly, or don't have online banking to continuously check."

Parent reported her concerns to the Canadian Anti-Fraud Centre. The federal agency confirmed it received one report of someone being charged $119.88 multiple times and is looking into what happened. 



Elizabeth McMillan is a journalist with CBC in Halifax. Over the past 13 years, she has reported from the edge of the Arctic Ocean to the Atlantic Coast and loves sharing people's stories. Please send tips and feedback to


To encourage thoughtful and respectful conversations, first and last names will appear with each submission to CBC/Radio-Canada's online communities (except in children and youth-oriented communities). Pseudonyms will no longer be permitted.

By submitting a comment, you accept that CBC has the right to reproduce and publish that comment in whole or in part, in any manner CBC chooses. Please note that CBC does not endorse the opinions expressed in comments. Comments on this story are moderated according to our Submission Guidelines. Comments are welcome while open. We reserve the right to close comments at any time.

Become a CBC Member

Join the conversation  Create account

Already have an account?