{“lastseen”:”2026-04-09T14:05:09″,”description”:”Cybercriminals using the so-called \\”spray and pray\\” tactic love to impersonate well-known brands. Especially ones with huge customer bases.\\n\\nAmazon reportedly has around 310 million active customers, so they certainly qualify as a brand worth impersonating. And it shows in the sheer volume of scams that use its name.\\n\\nAmazon account take-over (ATO) scams were numerous during the holiday season, and they haven\u2019t gone away. The scammers have ported the \\”product recall due to safety concerns\\” text message scam over to email.\\n\\nThe fake product recall message is one of scammers’ most popular lures, and we’ve reported on in the past.\\n\\nExample of Amazon refund text\\n\\nThe hook in a recent email campaign is the same: something you bought does not meet safety or quality standards.\\n\\nThe UK’s Mirror reported on emails that read:\\n\\n\\u003e \u201cDear Customer, we are writing to inform you of a product recall affecting an item from your March 2026 order due to a design defect that may pose a potential safety risk. We apologise for any inconvenience this may cause and appreciate your prompt attention to this important safety matter. Thank you for your continued trust in Amazon.\u201d\\n\\nFollowing the link takes the target to a fake login page designed to steal their Amazon username and password.\\n\\nThese messages are intentionally vague about the nature of the product or the exact issue they’re being recalled for. The less specific they are, the more likely it is that someone will think, \u201cThis could be me.\u201d If you\u2019ve recently ordered something from Amazon, you\u2019re more likely to fall for it.\\n\\n## How to avoid falling for Amazon phishing scams\\n\\n * If you get a recall notice, don’t click any links. Instead, go straight to Amazon using the app or by typing the website into your browser. Then check the **Message Centre** in your account. Legitimate messages from Amazon will appear there.\\n * If you\u2019ve fallen for this, change your Amazon password straight away and anywhere else you use that password. Monitor your bank statements for any unfamiliar charges, and contact your bank immediately if you see anything suspicious.\\n * While you’re in your Amazon account settings, turn on two-step verification. \\n * Report the scam to Amazon itself, whether you\u2019ve fallen for it or not. \\n * In the US, forward scam texts to 7726 (SPAM) or use the \u201cReport Junk\u201d option. For emails, report them as spam in your inbox.\\n * Install web protection that can warn you of phishing sites, card skimmers, and other nasties that could lead to your data being taken.\\n\\n\\n\\nScammers sometimes use information they\u2019ve found online to personalize their scam messages. Check what information is already out there about you using our free Digital Footprint scanner and then remove or change as much of it as you can.\\n\\n**Pro tip:** Malwarebytes Scam Guard can help you spot scams and guide you through what to do next.\\n\\n* * *\\n\\n**We don ‘t just report on scams\u2014we help detect them**\\n\\nCybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard. Submit a screenshot, paste suspicious content, or share a link, text or phone number, and we\u2019ll tell you if it’s a scam or legit. Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.”,”published”:”2026-04-09T13:05:44″,”modified”:”2026-04-09T13:05:44″,”type”:”malwarebytes”,”title”:”Scammers pose as Amazon support to steal your account”,”source”:””,”references”:””,”id”:”MALWAREBYTES:D9D4ADD3A1646C8893ACA51DC919C7EE”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2026\/04\/scammers-pose-as-amazon-support-to-steal-your-account”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-04-09T14:05:09″,”description”:”Cybercriminals using the so-called \\”spray and pray\\” tactic love to impersonate well-known brands. Especially ones with huge customer bases.\\n\\nAmazon reportedly has around 310 million active…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-42766","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n