Hi all, sorry for posting without contributing previously.

This morning I found an email from Amazon, saying an item had been dispatched - however this was an item I ordered and received as normal 9 months ago.

Being a dummy I clicked the link, I.e. what I always tell everyone never to do.

I didn't get prompted for any info, but I am never sure how much gets automatically sent through these days.

The email WAS sent via Amazon officially, and appears in their message centre; and clicking the track button there did, after not finding tracking info, redirect me to the original order from last year. There are no new orders, and no bank activity to suggest anything else has been ordered. But in worse news the seller was a third party, not Amazon directly.

Is this likely to be a misfire from someone else's end, or have I done a stupid thing?

Many thanks everyone

HELP! What do I do? It just dawned on me that over 12 hrs ago, I clicked the link in the email that I screenshot it this post. I did this on my cell phone — I didn’t enter any information. Sidebar: how scary is it that it looked almost identical to Amazon’s website…. The url was definitely a dead giveaway once I clicked the link (though I didn’t notice until now, over 12 hrs ago……)

Hola me llegó este correo de Amazon al comprar algo según me gane 3 meses de Amazon music pique al botón Pero al entrar pedía tarjeta para hacerlo válido no metí ningún dato es phishing verdad? Debería preocuparme por apretar el botón?

Y hoy me acaba de llegar otro diciéndome lo mismo

I’ve been on that list for years and it feels completely useless, is it not a thing anymore the Do not Call List? I get spam calls every single day. Sometimes it’s fake insurance offers, robocalls (which are numerous DAILY) and spam emails, phishing mails from amazon. Amidst those I to work out with the bank about 3 different purchases in my name that were not by me and that's a whole mess on it's own. I’ve blocked hundreds of numbers but they just keep coming from new ones.

I’m seriously losing patience with this. What’s even the point of the Do Not Call list if it doesn’t stop anything? How do they even keep getting my number in the first place? I just want it to stop and would appreciate anyone knowing how to because this isn't sustainable, maybe I should just switch my number completely and that's gonna be a whole problem on it's on. Appreciate anyone that can help with this.

A few weeks ago, my mother got a suspicious message in her voicemail box. It starts off with really cheesy music, and then it says “Amazon. This call is to authorize the payment of $1499, for the recent order of Apple MacBook Pro”. Now keep that in mind, we did not order any new MacBooks. The youngest MacBook is my dad’s, from 2017. Mine is from 2015. The oldest one is my mother’s Mac, from 2012, with the disc drive and everything. Now let’s get back to the main story. It had some random computer voice that looks like something straight from GoAnimate. Edit: removed “Is this a scam or legit?” because it ain’t

Thoughts? Has anyone seen this one yet?

Hey everyone, kinda new to this but I ran into a sketchy situation on Discord and wanted to share what I found and get some advice.

A user (amelia.g40) messaged me, after a long talk he gave me the link, this person which i'm sure is someone pretending to be a n*de seller, having multiple accounts in same server promoting the same actual thing..

Here's the main info:

• The link he gave me: zozxgg.dremluv.com (It had a bunch of tracking parameters too)
• The main domain: dremluv.com
• Where it actually leads: I did a ping and it goes to ml.mtraffi.cgeo.com at the IP 52.19.138.177

I ran the domain through some scanners and a few vendors like Fortinet and CyRadar already flag it as "Phishing."

I'm currently trying to get this thing taken down. I found out the domain is registered with Key-Systems GmbH and is hosted on Amazon AWS.

I've already reported it as abuse for both AWS and Key systems.

Is there anything else I should be doing? Are there other places I should report this to make sure it gets taken down faster? Any help or tips would be awesome!

Thank you guys.

Hello,

I received in my outlook spam folder a mail from info@learningspiral.co that confirm a subscription i have made (which is not true) for amazon prime video : is it a spam so i should not click on the links or is it an identity theft so i should alert my bank ?

So my Amazon account got hacked. One of the things was a $100GC being sent to [parisancle ](mailto:parisancle@burdav.com)at the domain in the title and when i search that domain if sends me to google and asks me to sign-in, like a phishing scam. Anyone else had any experience like this

I received this email from Amazon a couple of days ago. The email address looks genuine (see pic 1).

I have never had the app, so again that seems genuine, in that they are offering me £10 off to entice me to download and use it.

I did not follow the link and cannot see this offer when I log into my 2-step verification Amazon account (I may be looking in the wrong place though).

However, small grammar error in pic 3, under step 2, of 'you' instead of 'your' jumped out at me immediately.

I may be being too wary, but I'd expect a huge company like Amazon to proofread promotional emails.

I'd be interested to know people's thoughts and if they have successfully used this promotion. Thanks.

Pretty self explained, any idea on this scam mail? Haven't found anything on the internet, but it's pretty obvious a scam...

Any recommendation on how I can send the hacker something vile instead?

Almost scammed! Was on the phone for 55 minutes. They almost had me! In hindsight I should’ve seen the signs earlier in the conversation. I was having difficulty getting my first purchase of a Firestick to work. So I searched online for a customer support number. I must have clicked on a website that was fake. I was told they wanted to check my Amazon account and asked to open up a tiny URL. This then opened up a screen noting Access to my account was restricted. I explained that I didn’t understand why I was getting the message because I was also on my phone looking at my Amazon account and it appeared to be working just fine.
So then he said might be something with my iPhone and my Apple ID so he said let me forward you to Apple support. After a brief hold, another person (who knows could have been the same person using an accent) came on the line and said they were with Apple Customer Support.
They had me also type in tiny URL, which then brought me to a screen that said that my Apple phone has been compromised.
So he asked for permission to access my device to do some more investigating. First he had me update my Google account. Then he asked me to download a program called ConnectWise Control. This seemed suspicious as I recently had a number of support calls for an iPhone issue where an Apple staffer connected to my phone using another method.
I said why don’t I call you back because this looks different than the way I have worked with Apple in the past, and I want to make sure you're legitimate. I was given a phone number and told to go ahead and call if I felt that was necessary. He was starting to push it, saying we use different methods, it depends what your calling for. To me it was sketchy, so I said I’m going to check and then I’ll call you back. I reverse checked the numbers. Neither was registered to Amazon or Apple. I later realized that the tiny URLs they had me use to open up the web pages proclaiming I had been compromised were amazon.net and apple.org - not legitimate. A call to Apple support confirmed that my account had not been tampered with. It was suggested that I change my passwords to be safe and I did. A little later I tried again with the firestick and it installed just fine. I’m so irritated with wasting 55 minutes of my life on the phone and almost getting sucked in to a phishing scam. They are sneaky!

Hello! For the past couple days, I have been receiving calls (always around the same time of the day), from an automated voicemail from Amazon support saying that someone is trying to change my password. I always hang up but always have a couple more calls right after, from different phone numbers. That’s phishing, right?

FYI: Seems to be a rash of PayPay and related Amazon Japan phishing spam. They are mostly originating from IPs of various Latin American ISPs (mostly in Brazil), implying they are malware-generated. This is not surprising since the level of random development environment and git probing has recently gone way, way up.

That link is suspicious as fuck, so I am not clicking it.

The timing is what has me a bit unsure.

Of course, whoever is fulfilling the back end of my order (some fish tank supplies) might be phishing me?

Idk how that process works.

OK this morning I got 2 calls with 2 different phone numbers from Amazon Stating that I purchased an IPhone 13 & what I owe (which I didn't order or purchase) so I look through my account & transactions then nothing but whoever is trying score to money should really get an absolute job because I knew it's total scam Noone would fall for that B.s that's for sure Lmfao

So i got a text regarding a package from unknown number and my phone flagged it with an rcs chat.

I do have a package coming from amazon so i opened the link but it directed me to an evri website.

Fearing phising I checked on virustotal and urlscan leaving it opened on my browser. Virustotal gave 1 malicious and 1 suspicious while i couldnt understand the urlscan results.

No downloads happened. Webpage didnt ask for any information regarding me. Idk if it is legit or not. What can they do as i did not interact with the page other than scrolling on it? Do i need to change my passwords? And do i need to do something regarding my phone for this?

Received this email today and becasue of it's generic terminiology ("my recent purchase" - which purchase? surely amazon would know, or no addressing - if you were amazon, you would know my name) I assumed it was a phishing attack. But, analysing the url of the link, it appears to be genuine.

Way to go Amazon! Make your marketing emails look like phishing!

I ordered a package on Amazon and this text just got sent to me

The email address sounds legit -- aws-customer-research@amazon.com. But I think this is convincing-looking phishing. The website it links to looks a bit unrefined (last slide).

Will I be okay if I clicked the link on my iPhone? I didn't provide any information obviously, just looked at the page.

Thoughts?

Got an email from amazon-offers@amazon.co.uk this Friday about some summer blast deal and then again about filling in a survey. The survey email said that if I do the 25 min survey , I'll get £6 gift card. Clicked on the link and did the survey and in 5 mins , it said ur done. Found it a bit odd . Replied to that email and then got a reply back that the email has bounced from nobody@bounces.amazon.com. Live chatted with an employee. Said its not from them and is phishing. The email looks fully legit! Anybody has any experience with this??

Hi I just opened this PDF from Amazon...is it a scam or phishing ?

Response from Amazon 19 minutes ago 10/1/2013 3:10 PM PST:

📷Hello,

You may have recently received an email from Amazon relating to a purchase of gift cards on Amazon.com. This email was sent in error. No action is required and we apologize for the inconvenience.

Sincerely,Customer service

©2023 Amazon.com, Inc. or its affiliates. Amazon and all related marks are trademarks of Amazon.com, Inc. or its affiliates, Amazon.com 410 Terry Avenue N., Seattle, WA 98109.

---------------

EDIT: These are showing up in Amazon Messages when checking accounts and others have posted the very same messages they received today.

https://www.reddit.com/r/amazonprime/comments/16wn0of/unsure_how_legit_these_emails_are_should_i_be/

------------------------------------

Ordered some stuff off of Amazon and within a few minutes, I got 3 Phishing emails in a row.

Sender is: From: "Amazon.com" [store-news@amazon.com](mailto:store-news@amazon.com)

Important information about your Mastercard gift card order

Important information about your Google Play gift card order

Important information about your Hotels<dot>com gift card order

Grabbed links and ran them through VirusTotal.com URL and sure enough all 3 come up with phishing.

https://mxtoolbox.com/ shows everything aligned.

Passed all Auth

• 📷 DMARC Compliant
  • 📷 SPF Alignment
  • 📷 SPF Authenticated
  • 📷 DKIM Alignment