Amazon ‘Security Enhancement Protocol’ Phishing Scam
The original site is no longer online; links go to the Internet Archive copy.
What the fact-checkers found
According to this email, which purports to be from Amazon, the company has observed multiple login attempt errors on your account during it’s “usual security enhancement protocol.”
Supposedly, Amazon is concerned that someone other than you has been trying to access your account. Therefore, claims the email, Amazon has suspended your account for security reasons and your access will be restricted until you click to update your details.
However, the email is not from Amazon and the claim that your account has been suspended is untrue. Instead, it is a phishing scam designed to steal your Amazon account login details and a large amount of your personal and financial information.
Here’s what the scam email looks like:
Dear Amazon.com Customer,
During our usual security enhancement protocol, we observed multiple login attempt error while login in to your online Amazon account.
We have believed that someone other than you is trying to access your account for security reasons,
we have temporarily suspend your account and your access to online Amazon and will be restricted if you fail to update.
Clicking on the email opens a fake Amazon website
The message arrives as an image, so clicking anywhere on the email opens a fraudulent website designed to emulate an Amazon login page. The scam landing page looks like this:
After hitting the “sign in” button on the fake site, the following message will appear in your browser:
If you click the “Unlock” link as instructed, you will next be taken through a series of forms that ask for your personal and financial information:
You will then see a final message claiming that you have successfully updated your details and lifted the supposed account suspension.
Scammers Can Use the Stolen Information to Commit Fraud and Identity Theft
The criminals who sent out the scam email can now use the information you supplied to:
Hijack your Amazon account and use it to make purchases.
Make fraudulent transactions with your credit card.
Attempt to steal your identity.
Scammers Regularly Target Amazon Customers
Amazon phishing scams are very common and take many forms. Be wary of any message that purports to be from Amazon and claims that you must click a link or open an attached file to avoid an account suspension, update information, or rectify a supposed problem.
It is always safest to login to your Amazon account by entering the address into your browser’s address bar or via an official app rather than by following a link in a message.
The Amazon website includes information about how to identify and report such phishing scams.
If you receive this email or one similar to it, do not click any links or open any attachments that it contains.
Got a similar message?
Paste it into the detector and see whether it matches a known hoax.
Check a similar messageRelated fact-checks
Browse the archive →Amazon ‘Security Notice’ Phishing Scam Email
According to this ‘security notice’ email, which purports to be from Internet giant Amazon, access to ‘certain features’ of your account have been temporarily restricted as a security measure.
Amazon ‘Account Access Limited’ Phishing Scam Email
This email, which purports to be from the Amazon Accounts Team, claims that your Amazon account has been limited after a security check. Supposedly, there is a problem with your account and you must confirm some of your information.
PHISHING SCAM – Amazon 90% Discount Coupon Email
The email is not from Amazon and you have not won a 90% discount as claimed. Instead, the message is a phishing scam designed to steal your Amazon login details and other personal information.
PHISHING SCAM – Amazon ‘Integrity Check’ Email
The email is not from Amazon. It is a phishing scam designed to steal Amazon account login details and credit card data. If you receive this message, do not click any links that it contains.