~/scams explained / amazon-phishing-email-scam

Fake Amazon email: order, Prime, locked account or refund

An email mentions an order, a Prime subscription about to end or a refund. It is a fake message in Amazon's name that sends you to a copied sign-in page.

How the scam works

1. You get an email that claims to be from Amazon: an order you do not know, a Prime subscription that is ending or a locked account.
2. Sometimes it promises a refund that you only need to "confirm".
3. A link takes you to a page that looks almost exactly like the real sign-in.
4. There you are asked to sign in and to "update" your payment or card details.
5. The criminals use the details to shop at your expense or take over your account.

How to spot it

• You never placed the order that is mentioned.
• The email is generic and gives neither your name nor real order details.
• The sender address does not fit the company or looks random.
• It puts you under pressure: the account will be locked soon or Prime ends right away.
• You are asked to enter payment details or your password through a link.
• The email has mistakes in wording or layout.

What to do now

• Do not click links and do not open attachments.
• Open the official app or the website yourself and check your orders and messages there.
• Never type passwords or payment details through a link in an email.
• Do not call any number given in the email.
• Delete the email and report it as phishing in your mail program.

Already clicked or paid?

1. Only clicked: close the page, enter nothing and scan your device for malware.
2. Entered login details: change the password at once and switch on two-step sign-in.
3. Gave card details: call your bank using the number on the card and have the card blocked.
4. Check your orders and transactions, report it to the police and keep the email.

Frequently asked questions

How can I tell if an order is real?

Open the official app or website yourself and look in your orders. If it is not listed there, it is not yours.

Are there really refunds by email?

Real refunds show up in your account. An email that pushes you to confirm through a link is a warning sign.

I have no account there. Is the email harmless?

It is still fake. Criminals send it to many addresses. Delete it without clicking anything.

More scams

• Fake parcel text: "Delivery failed"
• Fake bank email: "Account locked" and "renew your security method"
• Fake PayPal email: "Account limited" and "suspicious payment"
• "Hi Mum, new number": the WhatsApp scam with the fake child
• Classified ads scam: the fake buyer with the "secure payment link"
• How to spot a fake online shop
• Prize draw scam: why "You have won" is often a trap
• Fake Microsoft support: the phone call and virus pop-up scam
• Fake bank employee call: when the bank seems to be calling
• Crypto investment scam: fake ads with famous faces
• Tax refund phishing: fake emails from authorities

General advice, not legal advice. If you lost money, involve your bank and the police.

← All scams