The latest fraudsters email scam is known as “Amazon scam” and it targets thousands of holiday shoppers to steal bank card details. Fraudsters are targeting Amazon shoppers in english speaking countries such as U.S, U.K, Australia, etc this holiday season with a new “authentic-looking” phishing scam that attempts to steal users’ personal and bank account details.
In an attempt to warn their customers against this scam, Amazon wrote the information below on it’s help-page:
“From time to time you might receive emails purporting to come from Amazon.co.uk which do not come from actual Amazon.co.uk accounts,” the company said. “Instead, they are falsified and attempt to convince you to reveal sensitive account information. These false e-mails, also called ‘spoof e-mails’ or ‘phishing e-mails,’ look similar to real emails.
“Often these e-mails direct you to a false website that looks similar to an Amazon.co.uk website, where you might be asked to give your account information and password. Unfortunately, these false websites can steal your sensitive information; later, this information can be used without your knowledge to commit fraud.”
Here is how the fraudsters actually operate. They send fraudulent emails to thousands of consumers (their targets) and the emails includes the subject line: “Your Amazon.com order cannot be shipped.” It also asks them to confirm “certain information” by clicking on a link, noting that they will lose access to their Amazon account and will be unable to place any future orders if they fail to do so. Of course, most customers or consumers are likely to follow this up as they do not want to lose either their order or their account, even if they do not order anything at the said time.
The link directs people to seemingly credible but actually fake website that asks them to type in their personal information including their name, address and bank card information. The best part of it is that after plugging in their personal details and clicking the “Save & Continue” button, consumers are then automatically redirected to Amazon’s official website, making it increasingly difficult for consumers to realise they have been duped.
According to Get Safe Online advisory, with your details at hand, “the fraudsters will be able to use your details to make purchases in your name and potentially also open financial products in your name.” “This is an opportunistic scam that is being perpetrated in the sure knowledge that many shoppers will have ordered goods from Amazon, and will be keen to know the progress of their order.”