{"id":22987,"date":"2025-07-25T15:02:11","date_gmt":"2025-07-25T15:02:11","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/22987\/"},"modified":"2025-07-25T15:02:11","modified_gmt":"2025-07-25T15:02:11","slug":"if-you-see-this-message-your-amazon-account-is-under-attack","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/22987\/","title":{"rendered":"If You See This Message, Your Amazon Account Is Under Attack"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/uk\/wp-content\/uploads\/2025\/07\/1753455731_304_960x0.jpg\" alt=\"Amazon logo\" data-height=\"1532\" data-width=\"2297\" style=\"position:absolute;top:0\"\/><\/p>\n<p class=\"color-body light-text\" role=\"button\">Attacks suddenly surge 5000%.<\/p>\n<p>dpa\/picture alliance via Getty Images<\/p>\n<p>Republished on July 25 with a new FTC warning over this latest attack.<\/p>\n<p>A new warning has just been issued for millions of Amazon users, as a new wave of attacks on accounts has suddenly surged 5000%. This will come at you by text message, <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/19\/police-warn-all-drivers-do-not-pay-these-speeding-tickets\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/19\/police-warn-all-drivers-do-not-pay-these-speeding-tickets\/\" target=\"_self\" aria-label=\"which is nothing new\" rel=\"nofollow noopener\">which is nothing new<\/a>. Between undelivered packages, unpaid tolls and motoring fines, the scale of text attacks sweeping the U.S. and Europe is \u201c<a class=\"color-link\" href=\"https:\/\/paul-walsh.medium.com\/why-sms-phishing-is-out-of-control-and-the-only-real-solution-that-can-stop-it-47456116220c\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/paul-walsh.medium.com\/why-sms-phishing-is-out-of-control-and-the-only-real-solution-that-can-stop-it-47456116220c\" aria-label=\"out of control\">out of control<\/a>.\u201d<\/p>\n<p>The team at <a class=\"color-link\" href=\"https:\/\/guard.io\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/guard.io\/\" aria-label=\"Guardio\">Guardio<\/a> tells me that these new \u201cAmazon refund scam texts\u201d have surged \u201cmore than 50 times in the past two weeks.\u201d Even in the world of text message attacks, that\u2019s some increase. \u201cThese texts began appearing shortly after Prime Day, which started two weeks ago on July 8,\u201d and spawned <a class=\"color-link\" href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2025\/07\/amazon-warns-200-million-prime-customers-that-scammers-are-after-their-login-info\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.malwarebytes.com\/blog\/news\/2025\/07\/amazon-warns-200-million-prime-customers-that-scammers-are-after-their-login-info\" aria-label=\"plenty of other attacks\">plenty of other attacks<\/a> as well.<\/p>\n<p>The texts are nothing to do with Amazon. The attackers do not even know you have an account. They\u2019re just playing a numbers game because most of you do. \u201cThe link in the message leads to a fake Amazon site designed to steal your account details and hack it.\u201d<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-6\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/21\/why-one-in-four-users-need-to-buy-a-new-smartphone\/\" target=\"_blank\" aria-label=\"\u2018One In Four\u2019 Smartphone Owners Must Upgrade This Year\" rel=\"noopener noreferrer nofollow\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/21\/why-one-in-four-users-need-to-buy-a-new-smartphone\/\">Forbes\u2018One In Four\u2019 Smartphone Owners Must Upgrade This YearBy Zak Doffman<\/a><\/p>\n<p>Amazon <a class=\"color-link\" href=\"https:\/\/www.amazon.com\/gp\/help\/customer\/display.html?nodeId=T2W6VB0DExBF3oyVvx\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.amazon.com\/gp\/help\/customer\/display.html?nodeId=T2W6VB0DExBF3oyVvx\" aria-label=\"warns\">warns<\/a> that \u201cscammers may send text messages claiming to be Amazon,\u201d and that account holders should be \u201cmindful\u201d if they \u201creceive a text message for orders or deliveries that you are not expecting.\u201d It\u2019s the same for refunds.<\/p>\n<p>Amazon runs an active program to monitor for such impersonation scams, which includes sharing information as and when new campaigns are identified and critically shutting down the bad actors behind these attacks, both technically and legally.<\/p>\n<p>But again this is a numbers game. The attackers are running an industrial scale scam that fires out messages indiscriminately. Targets will be found because countless users will have purchased recently on Amazon and who doesn\u2019t want an unexpected refund? The link is a short-code to beat Amazon\u2019s other warning to watch for misspelled URLs.<\/p>\n<p>If you receive this text, and many millions of you will. delete it immediately per the advice from the <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/06\/23\/fbi-warning-all-smartphone-users-must-delete-these-messages\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/06\/23\/fbi-warning-all-smartphone-users-must-delete-these-messages\/\" target=\"_self\" aria-label=\"FBI and state and local police\" rel=\"nofollow noopener\">FBI and state and local police<\/a> forces. If you have any doubts, log into your Amazon account using your app or usual methods and check there.<\/p>\n<p>This text attack industry with its billions of messages is driven by organized criminal gangs in China, beyond the reach of U.S. law enforcement. Networks filter out plenty of texts, but attackers use farms of normal phones and SIMs to bypass normal checks.<\/p>\n<p><a class=\"color-link\" href=\"https:\/\/www.trendmicro.com\/en_us\/forHome\/products\/trend-micro-scam-check.html?utm_source=pr&amp;utm_medium=referral&amp;utm_campaign=scamradarpr\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.trendmicro.com\/en_us\/forHome\/products\/trend-micro-scam-check.html?utm_source=pr&amp;utm_medium=referral&amp;utm_campaign=scamradarpr\" aria-label=\"Trend Micro\">Trend Micro<\/a> warns that \u201c30% of consumers have been scammed online, nearly 40% didn\u2019t realize it until they\u2019d already lost money and most didn\u2019t use any tech to verify the scam \u2014 relying on instinct alone.\u201d Its new ScamCheck tech is another potential bandaid.<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-7\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/20\/you-no-longer-decide-microsoft-deletes-passwords-in-10-days\/\" target=\"_blank\" aria-label=\"Microsoft Deletes Your Passwords In 10 Days\u2014\u2018You No Longer Decide\u2019\" rel=\"noopener noreferrer nofollow\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/20\/you-no-longer-decide-microsoft-deletes-passwords-in-10-days\/\">ForbesMicrosoft Deletes Your Passwords In 10 Days\u2014\u2018You No Longer Decide\u2019By Zak Doffman<\/a><\/p>\n<p>In response to Guardio\u2019s warning, Amazon is keen to emphasize the significant effort and investment being put into tackling such impersonation schemes. While this attack is outside its control, the potential viral threat to user accounts is taken seriously.<\/p>\n<p>You can read more about Amazon\u2019s defense against impersonation scams <a class=\"color-link\" href=\"https:\/\/www.aboutamazon.com\/news\/retail\/how-to-avoid-amazon-scams\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.aboutamazon.com\/news\/retail\/how-to-avoid-amazon-scams\" aria-label=\"here\">here<\/a>. \u201cIn 2024,\u201d it says, \u201cwe initiated takedowns of more than 55,000 phishing websites and 12,000 phone numbers being used as part of impersonation schemes.\u201d<\/p>\n<p>The company should take some credit for this. This scam text industry is opportunistic and does not target users based on nay prior or relevant data. All that\u2019s needed is a phone number. These are the most basic of scams and yet still they work.<\/p>\n<p>If there is any intelligence applied to the scam it\u2019s in the fake websites that capture user login information. Some of these are designed to bypass or capture 2FA codes and they\u2019re often hosted on legitimate infrastructure to trick defensive filters.<\/p>\n<p class=\"color-body light-text\" role=\"button\">Fake Amazon texts and login <\/p>\n<p>Guardio<\/p>\n<p>Clearly these texts are outside Amazon\u2019s control, and so users are urged to <a class=\"color-link\" href=\"https:\/\/www.amazon.com\/gp\/help\/customer\/display.html?nodeId=GRGRY7AQ3LMPXVCV\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.amazon.com\/gp\/help\/customer\/display.html?nodeId=GRGRY7AQ3LMPXVCV\" aria-label=\"report scams\">report scams<\/a> as they come in. Users should also ensure their accounts are fully protected, at least by two-factor authentication and ideally by passkeys.<\/p>\n<p>Amazon is keen to share its key tips to stay safe with those targeted by these attacks:<\/p>\n<p> \u201cVerify purchases on Amazon. If you receive a message about the purchase of a product or service, do not respond to the message or click on any link in the message; instead, log into your Amazon account or use the Amazon mobile app and confirm that it is really in your purchase history before taking any action.<br \/>\n Trust Amazon\u2019s app and website. We will not ask for payment over the phone or email\u2014only in our mobile app, on our website, or in one of our physical stores. We will not call and ask you to make a payment or bank transfer on another website.<br \/>\n Be wary of false urgency. Scammers often try to create a sense of urgency to persuade you to do what they\u2019re asking.<br \/>\n Don\u2019t be pressured into buying a gift card. We will never ask you to purchase a gift card, and no legitimate sale or transaction will require you to pay with gift cards. Learn more about common gift card scams on our help pages.<br \/>\n Contact us. If you\u2019re ever unsure, it\u2019s safest to stop engaging with the potential scammer and contact us directly through the Amazon app or website. Do not call numbers sent over text or email, or found in online search results. Remember Amazon will not ask you to download or install any software to connect with customer service nor will we request payment for any customer service support.<br \/>\n Check what others are saying. See if anyone else has reported a similar situation. In the U.S., Amazon has partnered with the Better Business Bureau to provide consumers a searchable Scam Tracker that enables you to search suspicious communications reported by others by email, URL, phone number, and more.\u201d<br \/>\n<a class=\"embed-base color-body color-body-border link-embed embed-4\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/24\/googles-unbeatable-pixel-update-leaves-samsung-behind-again\/\" target=\"_blank\" aria-label=\"Google\u2019s Unbeatable Pixel Update Leaves Samsung Behind Again\" rel=\"noopener noreferrer nofollow\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/24\/googles-unbeatable-pixel-update-leaves-samsung-behind-again\/\">ForbesGoogle\u2019s Unbeatable Pixel Update Leaves Samsung Behind AgainBy Zak Doffman<\/a><\/p>\n<p>America\u2019s Federal Trade Commission (FTC) has now issued a <a class=\"color-link\" href=\"https:\/\/consumer.ftc.gov\/consumer-alerts\/2025\/07\/scammy-texts-offering-refunds-amazon-purchases\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/consumer.ftc.gov\/consumer-alerts\/2025\/07\/scammy-texts-offering-refunds-amazon-purchases\" aria-label=\"consumer advice notification\">consumer advice notification<\/a> over these new Amazon refund scams, which it describes as \u201cscammy texts offering \u2018refunds\u2019 for Amazon purchases.\u201d<\/p>\n<p>\u201cScammers are pretending to be Amazon again,\u201d FTC says, which shouldn\u2019t come as a surprise given the sheer scale of this impersonation threat, as evidenced by the sheer scale of Amazon\u2019s response and the scope of takedowns.<\/p>\n<p>\u201cThis time,\u201d FTC says, the threat actors are \u201csending texts claiming there\u2019s a problem with something you bought. They offer a refund if you click a link \u2014 but it\u2019s a scam. Here\u2019s how the scam works so you can avoid it.\u201d<\/p>\n<p>FTC sets out what consumers can expect to see if they\u2019re under attack. \u201cYou get an unexpected text that looks like it\u2019s from Amazon. It claims the company did a \u2018routine quality inspection\u2019 and an item you recently bought doesn\u2019t meet Amazon\u2019s standards or has been recalled. The text offers you a full refund and says you don\u2019t need to return the item \u2014 as long as you click a link to request your money back. But there is no refund. Instead, it\u2019s a phishing scam to steal your money or personal information.\u201d<\/p>\n<p>It\u2019s not just the FTC amplifying this warning. Per one <a class=\"color-link\" href=\"https:\/\/da.sonomacounty.ca.gov\/amazon-warns-of-new-scam-emails\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/da.sonomacounty.ca.gov\/amazon-warns-of-new-scam-emails\" aria-label=\"Californian District Attorney\">Californian District Attorney<\/a>, \u201cAmazon recently advised its subscribers of a new round of scam emails purporting to be from Amazon either about delivery of an item that was not ordered or increase in the cost of a Prime Membership. The email contains a link to cancel the subscription due to the purported increase in cost which leads to a fake site requesting input of membership information that then allows scammers to access your Amazon account.\u201d<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-5\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/24\/microsoft-windows-ai-upgrade-2-reasons-to-change-your-browser\/\" target=\"_blank\" aria-label=\"Microsoft\u2019s AI Upgrade\u2014A Reason To Stop Using Google Chrome?\" rel=\"noopener noreferrer nofollow\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/07\/24\/microsoft-windows-ai-upgrade-2-reasons-to-change-your-browser\/\">ForbesMicrosoft\u2019s AI Upgrade\u2014A Reason To Stop Using Google Chrome?By Zak Doffman<\/a><\/p>\n<p>One of the challenges for consumers who might do some online research after receiving one of these texts, will be the surprise Amazon refunds doing the rounds some months ago. Per <a class=\"color-link\" href=\"https:\/\/www.cnet.com\/tech\/if-you-were-surprised-by-an-amazon-refund-from-years-ago-heres-why\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.cnet.com\/tech\/if-you-were-surprised-by-an-amazon-refund-from-years-ago-heres-why\/\" aria-label=\"CNET\">CNET<\/a>, \u201cIf you were surprised by an Amazon refund from years ago, here\u2019s why,\u201d with some customers \u201creceiving large refunds, years after their purchases.\u201d<\/p>\n<p>CNET explains that \u201cThese surprise Amazon refunds seem to have arisen from an internal Amazon review, possibly in response to a 2023 lawsuit.\u201d That action \u201cclaimed Amazon had quietly reversed legitimate return-related refunds for some shoppers.\u201d<\/p>\n<p>if you receive a refund text now, ignore the desk research and delete the text. If you have any doubts, follow Amazon\u2019s advice and log into your account as normal. You will receive any notifications there as well, and you\u2019ll know they\u2019re actually real.<\/p>\n","protected":false},"excerpt":{"rendered":"Attacks suddenly surge 5000%. dpa\/picture alliance via Getty Images Republished on July 25 with a new FTC warning&hellip;\n","protected":false},"author":2,"featured_media":22988,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[12490,12487,12489,12488,4979,12491,12493,84,59,12492,56,54,55,12494],"class_list":["post-22987","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-amazon-account-hijack","tag-amazon-attacks","tag-amazon-hack","tag-amazon-prime-attack","tag-amazon-prime-day","tag-amazon-refund","tag-android-attack","tag-business","tag-gb","tag-iphone-attack","tag-uk","tag-united-kingdom","tag-unitedkingdom","tag-windows-attack"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/22987","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=22987"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/22987\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/22988"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=22987"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=22987"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=22987"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}