Inboxes continue to be hit with bogus “Order confirmation” emails purporting to be from Internet giant Amazon.
The emails claim that you have purchased a specified product and provide an estimated delivery date along with other details about the supposed purchase.
However, the emails are not from Amazon and the order details that they contain are fake. In fact, the messages are phishing scams designed to steal your personal and financial information.
The scammers know that at least a few people will mistakenly believe that their Amazon account has been used to conduct unauthorized transactions and will click on the “refund” link.
If you do click the link, you will be taken to a fraudulent website that first asks for your Amazon account login credentials before requesting that you fill in a “refund form”. The bogus refund form will ask for your credit card numbers as well as your name and address and other identifying information.
After you submit the fake form, the scammers will be able to use the information you provided to access your Amazon account and conduct fraudulent transactions. They can also use your credit card, and if they have gathered enough information about you, they may be able to steal your identity as well.
Scams that target Amazon customers are very common. You can read more information about identifying and reporting such scams on the Amazon website.
Note that details such as the type of item supposedly purchased, the purchase price, and the dispatch address may vary in different incarnations of these scam emails.
Versions of the emails have been distributed for several years. Criminals regularly launch scam campaigns that use updated variants of the scam with different dates and product details.
A screenshot of one of the scam emails: