you still have session cookies, because AFAIK netflix doesn’t log out all your devices when you reset your password (though i think there’s an option for that?) so you can still set the password and email back if you have the session cookie maybe?
But I don't think a scam that relies on you resetting the password and not becoming suspicious is a bit of a stretch.