![\"Amazon](\"https:\/\/specials-images.forbesimg.com\/imageserve\/6878f6b6c97afccd60e9d69d\/Amazon-and-Prime-logos\/960x0.jpg?fit=scale\")
<\/p>\n<\/p>\n
Beware this Prime account attack, Amazon warns customers.<\/p>\n
NurPhoto via Getty Images <\/p>\n
Update, July 18, 2025: This story, originally published on July 17, has been updated with additional information from Amazon regarding the Prime account attacks that it has emailed 220 million users to warn them about.<\/p>\n
I know better than most that Amazon Prime subscribers are under attack<\/a>: I have been on the sharp end of multiple phone calls<\/a> and email-based threats<\/a> in the last four weeks alone. I have the advantage of being a cybersecurity insider, and so you would expect me to be aware of such threats and deal with them accordingly. Not everyone is so well informed, however, which is why Amazon has warned all 220 million Prime customers as attackers strike. Here\u2019s what you need to know and do.<\/p>\n ForbesFacebook Deletes 10 Million Accounts And Warns The Purge Will Go OnBy Davey Winder<\/a><\/p>\n Amazon Warns Hundreds Of Millions Of Customers As Attackers Strike<\/p>\n Pieter Arntz, a malware intelligence researcher at Malwarebytes, has issued a timely July 16 reminder<\/a> that \u201cscammers are impersonating Amazon in a Prime membership scam.\u201d I say timely, quite besides regular reminders of such attack threats being most welcome, because I have experienced not one, but two of these this week. Both were telephone calls, which I only answered as I was expecting to hear from the hospital and was in bed, ill at the time. The cause of Arntz\u2019s reminder, and the underlying Amazon warning to all 220 million Prime customers, however, was a spike in email attacks claiming that subscription rates are about to rise, along with a cancel subscription button that would lead to Prime account credential theft. The phone calls I took, by the way, were similar in outcome but differed in that they wanted me to believe someone had purchased an iPhone 13, of all things, using my account.<\/p>\n Amazon account attack warning email.<\/p>\n Amazon<\/p>\n The warning emails from Amazon, which I received on July 4 and wrote about<\/a> at Forbes on the very same day, started with a stark alert that Amazon has become aware of \u201can increase in customers reporting fake emails about Amazon Prime membership subscription.\u201d These emails are particularly dangerous because, as Amazon said, they \u201cmight include personal information in the emails, obtained from other sources, in an attempt to appear legitimate.\u201d This came on top of earlier warnings from security researchers that more than 120,000 fake Amazon domains and web pages had been set up in the weeks and months before Prime Day, one assumes to be used to help in such attacks.<\/p>\n Forbes98.5% Of Passwords Fail This Hacking Test \u2014 How Secure Is Yours?By Davey Winder<\/a><\/p>\n What Are Amazon Prime Account Impersonation Attacks?<\/p>\n Amazon has described an impersonation scam, the type of attacks that it is warning Prime users about, as being when an attacker \u201cpretends to be a trustworthy organization or person in order to steal your money or personal information,\u201d and perpetrated by \u201cphone, email, text, or even by messaging you on social media.\u201d The common denominator between them is that the threat actor seeks to induce the victim to make a payment or provide Amazon credentials, the latter leading to a Prime account takeover and all that entails. Amazon readily admits that such attacks are difficult to identify, hence the need for the warning email; however, it recommends that users be alert to certain red flags that can indicate this kind of attack methodology.<\/p>\n Attackers will often create a false sense of urgency and leverage this to entice a knee-jerk reaction, such as clicking a link or providing account information. How To Mitigate Prime Attacks, According To Amazon<\/p>\n The attack warning email from Amazon included a number of mitigation recommendations, including:<\/p>\n To verify your Prime membership, open your Amazon mobile app or go directly to Amazon.co.uk and select “Prime” from the main menu. You can find further advice from Amazon<\/a> online regarding how it protects customers from scams, along with the best ways to report an attack.<\/p>\n Check the BBB Scam Tracker database for Amazon attacks.<\/p>\n Better Business Bureau <\/p>\n Amazon has also partnered with the Better Business Bureau to enable customers to search a database of scams that allows the user to search by attack type, email, URL, brand, phone number and so on. You can also use the BBB Scam Tracker<\/a> tool to report scam attacks.<\/p>\n
\n Attackers will oftentimes ask for personal information, as well as the aforementioned account credentials, that a genuine caller or member of Amazon support staff would not. These may include, but are not limited to, payment and banking information.
\n Attackers may, as I mentioned earlier, suggest that you have made a high-ticket item order so as to leverage the urgency and require you to follow a link to cancel it.
\n Attackers may attempt to get you to make payments outside of legitimate Amazon channels, including third-party sites and wire transfers, or even by way of gift cards.
\nForbesWeb Browser AI Hack Attacks Confirmed \u2014 What You Need To KnowBy Davey Winder<\/a> <\/p>\n
\n Always access Amazon directly through the mobile app or by typing amazon.co.uk in your browser.
\n To determine if a message is really from Amazon, visit the Message Center under \u201cYour Account.\u201d
\n Enable two-step verification for your Amazon account through the Login & Security settings.<\/p>\n