Retail giant Amazon has issued a global alert to its 200–220 million Prime subscribers, warning of a surge in phishing attacks exploiting the Black Friday and holiday shopping season. Cybersecurity experts report scammers are impersonating Amazon via emails, SMS, and phone calls to steal login credentials and payment details. This rise in attacks is due to the increase in Amazon phishing scams during Black Friday.
How the Scams Operate
- Fraudsters send messages claiming Prime membership renewal issues or account compromise, using many familiar tactics seen in Black Friday scams involving phishing.
- Links in these messages direct users to fake Amazon login pages, allowing attackers to capture credentials. It’s a common method used in phishing, especially during Black Friday sales at Amazon.
- Many emails include personal details, such as the recipient’s name, order history, or partial payment card info, often sourced from previous breaches or dark web databases.
Amazon’s Actions to Protect Users
- Shut down 55,000+ phishing websites and blocked 12,000+ phone numbers tied to scams. These actions are part of their efforts to combat Black Friday scams, including Amazon’s well-known phishing threats.
- Introduced verified-sender badges in Gmail, Yahoo, and other email services
- Advised users to check the Amazon Message Center for authentic notifications instead of relying on email links
Tips to Stay Safe
- Avoid clicking links in unexpected emails or texts; visit amazon.com or use the official app
- Enable two-step verification (2SV)
- Use a strong, unique password and avoid reusing it elsewhere
- Monitor bank and credit card statements for unusual activity
- Forward suspicious messages to stop-spoofing@amazon.com or report via Amazon’s “Report A Scam” page
Why Now?
The spike in scams coincides with Black Friday and the holiday season, when users are already receiving many legitimate notifications. Fraudsters exploit this increased email volume, creating convincing messages with personal data to pressure recipients into acting quickly. These activities are part of the larger pattern of scams targeting Amazon customers during Black Friday.
Amazon emphasizes that vigilance and direct verification via the official site or app remain the most effective defenses against these impersonation scams.