Identifying Whether an E-mail, Phone Call, or Webpage is from Amazon
If you receive a suspicious (sometimes called phishing) correspondence, here are some tips to determine if it’s an email, phone call, or webpage from Amazon.com.
If you received correspondence regarding an order you didn’t place, it likely wasn’t from Amazon.com. Send the email as an attachment to stop-spoofing@amazon.com (http://stopspoofing@amazon.com) . If you are reporting a suspicious URL, put it in the body of the email and send it to stop-spoofing@amazon.com. For more information, go to
https://www.amazon.com/gp/help/customer/display.html?nodeId=201127830
Important: Email
Don’t open any attachments or click any links from suspicious emails. If you’ve already opened an attachment or clicked a suspicious link, go to Protect Your System (https://www.amazon.com/gp/help/customer/display.html?nodeId=201127790) .
Amazon will never send you an unsolicited email that asks you to provide sensitive personal information like your social security number, tax ID, bank account number, credit card information, ID questions like your mother’s maiden name or your password. If you receive a suspicious email, report it immediately.
Suspicious emails or webpages not from Amazon.com often contain:
- An order confirmation for an item you didn’t purchase or an attachment to an order confirmation
Note: Go to Your Orders (https://www.amazon.com/your-orders) to see if there is an order that matches the details in the email. If it doesn’t match an order in Your Account, the message isn’t from Amazon.
- Requests for your Amazon.com username and/or password, or other personal information
- Requests to update payment information
Note: Go to Your Account (https://www.amazon.com/youraccount) and select Payment options. If you aren’t prompted to update your payment method on that screen, the message isn’t from Amazon.
- Links to websites that look like Amazon.com, but aren’t Amazon
- Attachments or prompts to install software on your computer
- Typos or grammatical errors
- Forged email addresses to make it look like the email is coming from Amazon.com
Note: If the “from” line of the email contains an Internet Service Provider (ISP) other than @amazon.com, then it’s a fraudulent email.
Important: Phone Calls
While some departments at Amazon will make outbound calls to customers, Amazon will never ask customers to disclose or verify their Amazon.com password, credit card, or banking account number.
If you receive a phone call asking you to disclose the above information, please visit www.amazon.com/gp/help/contact-us/report-phishing.html to report the phone call to Amazon.