Amazon has issued a new alert to customers after researchers uncovered a wave of fake Amazon websites, phishing messages, and impersonation scams targeting shoppers during the busy holiday season. Criminals are creating look-alike sites and sending messages designed to steal logins, payment details, or verification codes from Amazon users.

According to security analysts, thousands of fake domains have been registered using variations of Amazon’s name, order pages, tracking links, and customer-support portals. Many of these pages are nearly identical to the real thing, making them highly effective at capturing personal information.

How the Scam Works

Scammers contact victims through email, text, or social media with messages claiming:

• There’s a problem with a delivery

• An order can’t be processed

• A refund is waiting

• Suspicious activity was detected

The link leads to a fake Amazon login page. Once you enter your username, password, or a one-time code, the attacker gains access to your account.

Some scams also involve phone calls from imposters posing as “Amazon Support,” requesting verification codes or remote access to your device. Amazon does not contact customers this way.

How to Protect Yourself

• Only log in through the official Amazon app or by typing amazon.com manually

• Do not click links from unexpected messages

• Turn on two-step verification

• Never share verification codes with anyone

• Amazon will never ask for your password or remote access to your device

If You Already Clicked a Link

Change your Amazon password immediately, enable two-step verification, and review recent orders and payment methods for anything unfamiliar.