Amazon Phishing Emails

Look-out for fake Amazon order notification emails that ask you to call “fraud prevention support” if you didn’t authorise the supposed payment. The emails, which feature seemingly authentic Amazon branding, list supposed purchases for high priced items such as smart TVs and game consoles. The total cost of the listed purchases is usually several thousand dollars.

These emails are not from Amazon and they do not contain details of any real purchases made via your Amazon account. Even if you’ve never logged on to Amazon some of these scams can affect you, too. 

The goal of the scam emails is to panic you into calling the supposed fraud prevention number. The scammers hope that you will call in the mistaken belief that your account has been compromised and that high-value items have been purchased using your credit card. If you do call, you will be connected to a scammer posing as an Amazon fraud prevention support worker.  After you explain the situation, the scammer will claim that the purchase can be reversed and the supposed account breach rectified.

Then, the scammer will claim that to proceed with the reversal, he or she will need you to provide your credit card details, your Amazon login credentials, your name and address, and other sensitive personal information. After you provide the requested information, the scammer will assure you that the transaction has been reversed and that the funds will be put back into your account within a specified time-frame such as 24 hours.

You might relax, believing that you have dealt with the issue. But, now, the scammers can use the information stolen from you to hijack your Amazon account and make fraudulent purchases in your name, fraudulently use your credit card, and, possibly, steal your identity as well.

If you receive an email that claims to be from Amazon and lists purchases you know nothing about, be sure to proceed with caution. Do not call any number listed in the email. Do not click any links or open any attachments that the email contains.
Instead, log in to your Amazon account via your browser or a trusted app and check for any unauthorised purchases. Also, check your bank or credit card provider.  If the email is a scam, there will be no unexpected transactions listed in your accounts.

These are sophisticated frauds thar share some  characteristics with the fake Tech Support scams that have generated over £2m for criminals un the UK last year, according to Action Fraud.

If there are such transactions, you can then contact your credit card provider and Amazon for assistance. These scams work because the emails may appear genuine at first glance and they are designed to get people to act quickly without due forethought.

Amazon takes phishing and spoofing attempts seriously. If you receive correspondence you think may not be from Amazon, please report it to Amazon.

Amazon:       Kaspersky:       Hoax Slayer:     Hertforshire Mercury:      Action Fraud:

You Might Also Read:

Popular Types Of Phishing Emails:

 

« Pro-Active Cyber Protection
Bug Bounty & Crowd-Sourced Cyber Security »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

SC Media

SC Media

SC Media arms information security professionals with the in-depth, unbiased business and technical information they need to tackle the countless security challenges they face.

Trend Micro

Trend Micro

Trend Micro is a leader in hybrid cloud, endpoint, and network security solutions.

National Information Security & Safety Authority (NISSA) - Libya

National Information Security & Safety Authority (NISSA) - Libya

NISSA is responsible for safeguarding the integrity, availability and resilienceof ICT infrastructure, resources, services and data in Libya.

International Computer Science Institute (ICSI)

International Computer Science Institute (ICSI)

ICSI is a leading independent, nonprofit center for research in computer science. Research areas include network security and privacy.

Clavister

Clavister

Clavister is a network security vendor delivering a full range of network security solutions for both physical and virtualized environments.

CalCom

CalCom

CalCom Hardening Solution (CHS) for Microsoft OMS is a security baseline-hardening solution designed to address the needs of IT operations and security teams.

Cyanre

Cyanre

Cyanre delivers state of the art cyber forensic services through software technologies and procedures that exceed conformities of major law enforcement agencies across the globe.

Austrian Institute of Technology (AIT)

Austrian Institute of Technology (AIT)

AIT is Austria's largest research and technology organisation and a specialist in the key infrastructure issues of the future including data science and cybersecurity.

Founder Shield

Founder Shield

Founder Shield is a data driven insurance brokerage focused excusively on rapidly evolving high-growth companies.

ProofID

ProofID

ProofID is a specialist provider of Identity Access Management (IAM) solutions. We focus on the solving the complex needs of the modern enterprise.

Outsource Group

Outsource Group

Outsource Group is an award winning Cyber Security and IT Managed Services group working with a range of SME/Enterprise customers across the UK, Ireland and internationally.

ThreatER

ThreatER

ThreateER (formerly ThreatBlockr / Bandura Cyber) is a cybersecurity platform that provides active network defense by automating the discovery, enforcement, and analysis of cyber threats at scale.

Aegis9

Aegis9

Aegis9 is an Australian owned and sovereign consultancy that specialises in providing tailored security solutions for both public and private sector clients based on their specific needs.

ZeroGPT

ZeroGPT

ZeroGPT.com stands at the forefront of AI detection tools, specializing in the precise identification of ChatGPT-generated text.

Cybit

Cybit

Cybit is the one-stop-shop for digital transformation that scales in line with your growth.

Ionize

Ionize

Ionize offers solutions to help you uplift your capability across the full-spectrum of cyber security - assessment, remediation, monitoring, governance and ongoing education.