Amazon ‘Your Order Has Been Placed’ Phishing Scam

According to this would-be notification email, which purports to be from Amazon, an order has been placed via your account.

The email includes the Amazon logo along with a description of the item you supposedly purchased. It urges you to click a link to “secure your account” if you did not place the order described.

However, Amazon did not send the email and no such order was made. The email is a phishing scam designed to steal your personal and financial information.

Less experienced Internet users may be tricked into clicking the link in the mistaken belief that they must urgently rectify a security breach or reverse a fraudulent order.

In fact, the link opens a fake website that has been built so that it looks like a genuine Amazon login page. After “logging in” on the fake site, you will be presented with a “security update” form that asks for your name and address, credit card numbers, and other identifying information. After submitting the requested information, you may see a message claiming that your account has been secured and the fraudulent order cancelled. Your browser may then automatically redirect you to the real Amazon website.

Meanwhile, criminals can collect the information you supplied and use it to hijack your Amazon account. Once in, they can use your account to make purchases in your name. They can also make fraudulent transactions with your credit card and potentially steal your identity as well.

This example is just one version of an ongoing series of phishing emails targeting Amazon customers. Be wary of any email that claims to be from Amazon and asks you to click a link related to a purchase that you know nothing about. Other versions may claim that there is a problem with your account that you need to deal with urgently.

You can read more information about identifying and reporting such scams on the Amazon website.

A screenshot of the scam email: