According to this email, which purports to be from Amazon, the company has observed multiple login attempt errors on your account during it’s “usual security enhancement protocol.”
Supposedly, Amazon is concerned that someone other than you has been trying to access your account. Therefore, claims the email, Amazon has suspended your account for security reasons and your access will be restricted until you click to update your details.
However, the email is not from Amazon and the claim that your account has been suspended is untrue. Instead, it is a phishing scam designed to steal your Amazon account login details and a large amount of your personal and financial information.
Here’s what the scam email looks like:
Dear Amazon.com Customer,
During our usual security enhancement protocol, we observed multiple login attempt error while login in to your online Amazon account.
We have believed that someone other than you is trying to access your account for security reasons,
we have temporarily suspend your account and your access to online Amazon and will be restricted if you fail to update.
Clicking on the email opens a fake Amazon website
The message arrives as an image, so clicking anywhere on the email opens a fraudulent website designed to emulate an Amazon login page. The scam landing page looks like this:
After hitting the “sign in” button on the fake site, the following message will appear in your browser:
If you click the “Unlock” link as instructed, you will next be taken through a series of forms that ask for your personal and financial information:
You will then see a final message claiming that you have successfully updated your details and lifted the supposed account suspension.
Scammers Can Use the Stolen Information to Commit Fraud and Identity Theft
The criminals who sent out the scam email can now use the information you supplied to:
- Hijack your Amazon account and use it to make purchases.
- Make fraudulent transactions with your credit card.
- Attempt to steal your identity.
Scammers Regularly Target Amazon Customers
Amazon phishing scams are very common and take many forms. Be wary of any message that purports to be from Amazon and claims that you must click a link or open an attached file to avoid an account suspension, update information, or rectify a supposed problem.
It is always safest to login to your Amazon account by entering the address into your browser’s address bar or via an official app rather than by following a link in a message.
The Amazon website includes information about how to identify and report such phishing scams.
If you receive this email or one similar to it, do not click any links or open any attachments that it contains.