This summer Amazon sent alerts to over 200 million customers warning about a scam directed at their Prime customers. Scammers are sending fake emails claiming your Amazon Prime subscription will automatically renew at an unexpectedly high price.
Scammers might include personal information in emails, obtained from other sources, in an attempt to appear legitimate.
These emails may also include a “cancel subscription” button leading to a fake Amazon login page.
Once someone clicks on the “Cancel’ button, they are taken to a fake Amazon login screen. Once they login there, the scammer then has their details that they can use to login to the actual Amazon site and purchase things, as well as login to any other online account that uses the same credentials.
The fake site might also request payment information and other personal details which, when entered, will go straight to the scammer who will be quick to use or sell them on.
Amazon’s customer base is so large that they are a target all year long. Amazon said its staff had handled cases including fake messages about Prime membership renewals, bogus refund offers, and calls claiming Amazon accounts have been hacked.
How to avoid falling for an Amazon scam
- If you receive an email like this, don’t click on any links.
- Not sure if a message is from Amazon or not? You can check by going to the Message Centre under Your Account. Legitimate messages from Amazon will appear there.
- Report the scam to Amazon itself, whether you’ve fallen for it or not.
- Set up two-step verification for your Amazon account. This puts an extra barrier between you and the scammers if they do manage to get hold of your login details.
- Like in this particular scam that Amazon is warning about, scammers sometimes include personal details about you which they have got from other sources (such as social media, the dark web, etc.). Check what information is already out there about you using a Malwarebytes free Digital Footprint Scanner and then remove or change as much of it as you can.
- Install web protection that can warn you of phishing sites, card skimmers, and other nasties that could lead to your data being taken.
- Lastly, if you’ve fallen for this or a similar scam, change your Amazon password and anywhere else you use that password. Also, make sure to monitor your card statements for any unfamiliar charges, and contact your bank immediately if you see anything suspicious.