Amazon's massive user base and the fact that nearly everyone has an active account makes it the single most impersonated brand in phishing and scam-call campaigns. Scammers don't need to guess whether you shop online — they can simply assume you use Amazon, and they're almost always right.
This scale advantage is exactly why Amazon impersonation shows up constantly across email, text, and phone-call scams: the same fake message can be blasted to millions of people, and a meaningful percentage will have a real, active Amazon account that makes the message feel plausible.
Fake 'order confirmation' or 'delivery problem' emails and texts include a link to a lookalike login page designed to steal your Amazon credentials the moment you type them in. Fake 'unusual sign-in activity' or 'your account has been suspended' alerts pressure you to 'verify' by entering your password and payment information on a fraudulent site.
Phone call scams are also widespread: a robocall or live caller claims to be from the 'Amazon fraud department,' references a fake large purchase to create alarm, and asks you to install remote-access software or read back a verification code sent to your phone. Fake refund scams claim you're owed money for a return and ask you to log into a fake site or share banking details to 'process' it. Some scams even involve fake third-party sellers on real Amazon listings offering an off-platform 'discount' if you pay them directly, bypassing Amazon's buyer protection entirely.
Check the sender's actual email address, not just the display name — real Amazon emails come from amazon.com domains, not lookalikes like amazon-support.com or amazon-security-alert.net. Amazon will never call you asking for your password, full card number, or a one-time verification code over the phone.
Hover over — don't click — links to see the real destination domain before you go anywhere near entering credentials. Urgency and threats, such as 'your account will be closed in 24 hours,' are a hallmark of the scam, not of real Amazon communication. Legitimate order and account issues are always visible by logging into amazon.com directly — never through a link inside an unsolicited message.
If you entered your password on a fake site, change your Amazon password immediately — and anywhere else you reused that same password — and enable two-factor authentication if you haven't already. If you entered payment card details, contact your card issuer right away to flag potential fraud and consider requesting a new card number.
Check your Amazon account's order history and login activity for anything unfamiliar. And never install 'remote access' or 'screen sharing' software because a caller claiming to be Amazon support asked you to — this is one of the most damaging follow-up steps in these scams, since it can hand over control of your entire device.
Go directly to amazon.com or the Amazon app to check your real order and account status, rather than trusting a link or phone number provided inside the suspicious message itself. Report phishing emails to Amazon at [email protected] so they can act on the campaign.
If you're unsure whether a link, site, or 'Amazon' offer is real, the safest move is to check it before you interact with it at all — clicking to 'see if it's real' is exactly how these scams succeed.
Fake Amazon order alerts and login pages are one of the most common phishing tactics online. Before you click a link or enter your Amazon password anywhere, paste the URL into Scam Detective for an instant 0–100 scam risk score, a plain-English verdict, and the top red flags — all for $2. Check it now at Scam Detective. If your own brand is being impersonated the way Amazon is here, our Brand Impersonation Audit ($29) finds lookalike domains, typosquats, and copycat sites using your name — with evidence, a risk rating, and a takedown-request template.
Check a URL now