{"id":37801,"date":"2020-11-24T06:40:08","date_gmt":"2020-11-24T11:40:08","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=37801"},"modified":"2020-11-24T06:40:08","modified_gmt":"2020-11-24T11:40:08","slug":"amazon-related-phishing-scam","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/amazon-related-phishing-scam\/37801\/","title":{"rendered":"The most widespread Amazon scams"},"content":{"rendered":"

Anyone who has had any contact with Amazon knows that, from time to time, you may come across scammers who parasitically exploit the marketplace\u2019s popularity. They defraud all sorts of users: sellers, buyers, regular users, and one-time visitors.<\/p>\n

Even if you\u2019ve never logged on to Amazon (real talk, though: never?), some of these scams can affect you, too. We\u2019ll focus first on buyers because they form the largest group, but we won\u2019t ignore everyone else.<\/p>\n

I shop on Amazon. What should I look out for?<\/h2>\n

For many years now, phishing \u2014 that timeless classic of Internet fraud \u2014 has remained the main threat to most ordinary users. A scammer\u2019s main target is your personal data, and preferably data that gives access to important accounts (ideally, finance-related accounts). An Amazon account, as you might guess, is a worthwhile prize.<\/p>\n

Scammers try to obtain this data using fraudulent e-mails, text messages, or calls purporting to come from Amazon. There are dozens of phishing techniques, but most often, they stress urgency. Below, you\u2019ll find the main types of phishing e-mails our antispam analysts have come across recently.<\/p>\n\n

Fake message about an Amazon Prime subscription<\/h3>\n

You receive an e-mail or text message claiming you\u2019ll soon be charged for the Amazon Prime subscription you (allegedly) purchased and providing a number you can call to cancel the purchase. If you call it, they\u2019ll try to trick or pressure you into revealing your username, password, and card number.<\/p>\n

There is also a version of this scheme that involves persuading victims to install the remote access program TeamViewer on their computers \u2014 and that relieved ordinary Britons of a million pounds<\/a> over a three-month period in 2019.<\/p>\n

Fake alerts about suspicious activity on your Amazon account<\/h3>\n

One of the most common phishing techniques uses a message that appears to come from Amazon and refers to suspicious activity or unauthorized transactions in your account. In this scenario, the scammers try to frighten you by making you think someone hacked your account.<\/p>\n

\"A<\/a>

A phishing e-mail saying your account has been locked because of suspicious activity<\/p><\/div>\n

To put things right, the notification says, you need to click a link. The link leads to a fake Amazon site, and if you enter your username and password there, that information goes straight to the scammers, who use them to hack your account (for real). One woman in Fife, Scotland, ended up losing \u00a380,000<\/a> as a result of such a call.<\/p>\n

Confirmation of an Amazon order you didn\u2019t make<\/h3>\n

Your Sony PlayStation will soon be shipped to the address you provided. Didn\u2019t order one? Just call us and we\u2019ll fix everything.<\/p>\n

As you may have guessed, making that call is a bad idea. Once again, scammers are after easy money and personal data. One woman in Australia lost AU$4,000 this way<\/a>; the scammers got her to buy Amazon gift cards.<\/p>\n

\"A<\/a>

A fraudulent e-mail purporting to be from Amazon, claiming an expensive order \u2014 which you never placed \u2014 is on its way to you<\/p><\/div>\n

Fraud involving paying for products with a gift card<\/h3>\n

Gift cards are central to a common ploy: You find a product online at a very good price, but the seller suggests you transfer the details of an Amazon gift card as payment. We do not recommend playing along. You\u2019ll end up with no money on the card and no purchase.<\/p>\n

It\u2019s always best to pay for online purchases in ways that allow you to challenge the payment if something goes wrong. The main purpose of an Amazon gift card, as the name suggests, is to be given as a gift. Any challenge to sending one of these cards to an unscrupulous anonymous seller won\u2019t hold up.<\/p>\n

Fake requests to buy gift cards<\/h3>\n

Another option is a fake e-mail from your boss urgently requesting a pack of Amazon gift cards. It may come as a surprise, but people still fall for this trick.<\/p>\n

The sender doesn\u2019t have to be your boss, either; it could be a relative, such as a grandmother uncomfortable with technology, asking you to buy several small-value gift cards as Christmas gifts for the whole family.<\/p>\n

The most effective counter is also the simplest: contact your boss (or grandmother) using a different method (don\u2019t reply to the e-mail) and make sure everything is all right.<\/p>\n

Fake notifications about a bonus or gift<\/h3>\n

We\u2019ve seen examples of scammers using the stick, but they also use the carrot to lure people in. If they can\u2019t intimidate you with talk of hacking your account or suspicious transactions, they can still send you an e-mail about accumulated bonus points about to expire or some other gift. The result is the same: If you click the link and enter data on the fake site, it will be sent to the scammers. Don\u2019t do it.<\/p>\n

\"You're<\/a>

You\u2019re supposedly entitled to a bonus from Amazon, but you\u2019ll have to go to a phishing site to get it<\/p><\/div>\n

I sell products on Amazon. Should I look out for anything?<\/h2>\n

Scammers don\u2019t care if you\u2019re a buyer or a seller; either way, you have money they want. If you sell on Amazon, look out for these scams.<\/p>\n

A \u201cfailed delivery\u201d<\/h3>\n

The delivery failure scam has already become a classic of Internet fraud (and perhaps of fraud in general). What can you do if a buyer claims their package never arrived? Does Amazon have ways to combat this kind of scam? Yes. Always choose delivery with precise tracking for your package, which lets you track it every step of the way, including learning when it\u2019s received.<\/p>\n

Product substitution after receipt<\/h3>\n

What if a buyer replaces the product they purchased with a damaged one and demands compensation? This one\u2019s up to you: Before shipping the item, take a picture or video of the item in good condition and seal the package with a protective sticker. If the sticker\u2019s broken, then you clearly held up your end of the deal.<\/p>\n

Some shameless individuals have earned hundreds of thousands of dollars on illegal returns, replacing real goods with boxes of dirt<\/a>. They were caught in the end, and justice prevailed, but sellers can experience real damage before everything shakes out.<\/p>\n\n

I don\u2019t have any kind of connection to Amazon. Should I be on the lookout for anything?<\/h2>\n

Surprisingly, yes. Amazon\u2019s gravitational influence can affect you even if you\u2019ve never visited the platform\u2019s website.<\/p>\n

Fake Amazon job offers<\/h3>\n

Take, for example, fake job offers. The scam starts out on a similar path, but instead of a gift or a delivery problem, the person with the unfamiliar phone number is offering you a job at Amazon. Weird, sure, but the prospect of working from home with a flexible schedule, making several thousand dollars per month is tempting.<\/p>\n

Hang on: There\u2019s an applicant fee. That you pay with an Amazon gift card. Sound familiar? It\u2019s time to hang up. After all, Amazon advertises open jobs on its website<\/a> and does not charge for the privilege of applying.<\/p>\n

Another version of this scam invites people to write reviews of products on Amazon and get paid for it. Victims are redirected to a phishing site, and any data entered there will fall into the hands of scammers.<\/p>\n

Mysterious packages and rigging ratings<\/h3>\n

Another type of fraud worth mentioning is rigging a seller\u2019s rating using a method called \u201cbrushing.\u201d<\/a> It begins with a package of random stuff you didn\u2019t even order. Some of the unwanted packages contained slippers, light bulbs, or seeds<\/a>, for example.<\/p>\n

The trick lies in the reviews. An unscrupulous seller can register hundreds of fake accounts, sell some cheap items to each of them, send said items to random addresses from a leaked database, and post rave reviews purporting to come from those fake accounts. In some cases, the packages have even gone to dead people<\/a>.<\/p>\n

This scam doesn\u2019t pose a direct threat to the recipient, but if you receive a package like this, it\u2019s very likely your data has leaked. Therefore, we recommend checking your e-mail addresses against this database of known leaks<\/a> and, if necessary, changing your passwords. That done, report any such package to Amazon support so the company can deal with the fraudulent accounts.<\/p>\n

How can I protect myself from fraud on Amazon?<\/h2>\n

Here are the basic rules for handling suspicious e-mails to protect yourself against phishing and other high-tech deception methods:<\/p>\n