Stay informed about cyber awareness training topics and mitigate risk in your organisation.

Scam of the Week – Amazon Phishing Scams continue to dupe unsuspecting victims

Amazon Phishing Scams

Internet users are being targeted with a range of different Amazon phishing scams designed to steal their personal and financial details.

One of the most widely reported scams in the UK has been the reward voucher phishing scam.

How Amazon Phishing Scams Work

Victims have reported receiving an email informing them that they’ve won a reward voucher worth £500.

The email claims that the offer is only valid for a limited amount of time and that in order to receive their prize they must click on the ‘I accept’ button immediately.

Of course, this urgent call to action bears all the hallmarks of a phishing attack and as soon as the user clicks on the link they are directed to a fake cloned website set up to steal their details.

Another scam doing the rounds is the account validation email. Users have reported receiving an email asking them to confirm their account details or else it will be shut down.

To prevent their account from being closed, they are directed to click on a link to confirm all their details. As is the case with all these scams, the link is malicious and will either install malware on the user’s device or direct them to a cloned website to harvest details.

Amazon is one of the world’s largest online retailers and continues to prove one of the most attractive targets for phishing due to its massive customer base.

The cyber crooks know that with such a massive global audience, there will always be a percentage of people that fall for their phishing attacks and they are continually tweaking and releasing new versions of their scams to dupe as many people as they can into disclosing sensitive information.

Amazon issued advice to customers on what they should do if they receive a phishing email: “Fraudsters may impersonate us in order to get access to your information and, from time to time, you might receive e-mails purporting to come from which do not come from actual accounts. These are an attempt to convince you to reveal sensitive information.

“We take phishing and spoofing attempts on our customers very seriously. If you receive a correspondence that you think may not be from Amazon, please report it to us by sending the e-mail or webpage to”

How to protect against Amazon Phishing Emails

To protect yourself from falling victim to these types of online scams, never click on suspicious links or download attachments from unknown sources. Other signs to look out for include; poor grammar, a mismatched URL, threatening or urgent language, claims of prizes or a request for information.

MetaPhish provides a powerful defence against phishing and ransomware attacks. Contact us for further information on how we can help protect your business from this growing threat.

about the author

sharing is caring

Share on linkedin
Share on twitter
Share on facebook

you might enjoy reading these

UK GDPR Series Available Now

Privacy is an ongoing concern for every organisation, however, the notion of consent isn’t without its complications. To help organisations navigate data protection protocols, we
Read More »

Seasonal Phishing Templates

Phishing is a year-round activity for cybercriminals, and just like retailers, they use seasonal events as an opportunity to cash in. Seasonal occasions, including St
Read More »

Request Demo

The personal information that you provide to us in this form will only ever be used by MetaCompliance (as the Data Controller) for the following specifically defined purposes:

  • email you content that you have requested from us
  • with your consent, occasionally email you with targeted information regarding our service offerings
  • continually honour any opt-out request you submit in the future
  • comply with any of our legal and/or regulatory obligations