Skip to content
ScamSniff
← Back to Home

Email & Phishing Safety

Amazon Impersonation Scams: How to Tell a Real Amazon Email From a Fake One

10 min read min readBy ClearShield Team

Bottom line: Amazon impersonation is now one of the most-reported scams in the country, and it almost always follows the same script — a fake email or text claims there's a problem with your order, your account, or a charge, and pressures you to click a link or call a number "before it's too late." Amazon will never ask you to verify your password, Social Security number, or payment details by phone or through a link in an email. If you weren't expecting the message, don't click anything — log in to Amazon directly through your browser or app instead. If you've already clicked a link or given information, an identity monitoring service like Aura can watch for misuse and alert you before small damage becomes a big problem.

Last updated: 2026-07-11

The Federal Trade Commission has named Amazon the most-impersonated company in America for several years running, and the numbers keep climbing. Scammers like it for a simple reason: almost everyone has an Amazon account, so a fake "problem with your order" email lands in a believable inbox no matter who opens it. For seniors, who may place fewer online orders and be less familiar with what a real Amazon notification looks like, the scam is especially effective — and especially costly, since it often ends with remote access to a computer or a wire transfer disguised as a "refund."

This guide walks through exactly how the scam works, the red flags that give it away every time, and what to do if you think you've already been targeted.


How the Amazon Scam Actually Works

Nearly every version of this scam follows the same basic shape, whether it arrives by email, text message, or phone call:

  1. The hook. You receive a message claiming something is wrong — an order you didn't place, a subscription renewal, a suspended account, or a payment method that "failed to process."
  2. The urgency. The message says you have a short window (often 24 hours) to respond, or your account will be locked, the charge will go through, or you'll lose access to your orders.
  3. The link or number. You're told to click a link to "verify your account" or call a phone number to "speak with support."
  4. The trap. The link leads to a fake Amazon login page that steals your username and password, or the phone number connects you to a scammer posing as Amazon support who will ask you to install remote-access software, read them a one-time code, or purchase gift cards to "reverse the charge."

None of these steps involve Amazon at any point. The email address, the phone number, and the website are all built by the scammer to look convincing — and increasingly, they are.


The Two Most Common Versions

The "Unauthorized Order" Email

You get an email with a real-looking Amazon logo showing an order confirmation for something expensive — a laptop, a gift card, a large electronics purchase — that you never bought. The email includes a link that says "If you did not make this purchase, click here to cancel and get a refund." Clicking takes you to a fake login page, or dials a fake support line that walks you through "canceling" the order by giving up your card number.

The "Account Suspended" Email

This version says your account has been locked due to unusual activity, a billing issue, or a policy violation, and that you need to "verify your identity" to restore access. It usually includes a countdown or deadline to create panic. The link goes to a page that looks identical to Amazon's real sign-in page but sends whatever you type directly to the scammer.

Both versions rely on the same trick: making you feel like you need to act immediately, before you have time to stop and think.


5 Signs an "Amazon" Email Is Fake

You can catch almost every one of these scams using the same five checks, in under a minute:

  1. Check the sender's actual email address, not just the display name. Tap or hover on the sender name. A real Amazon email will end in @amazon.com. A scam email might show "Amazon Support" as the name but come from something like amazon-support-help@mail-verify.net.
  2. Look for your name. Amazon's real order and account emails almost always greet you by your first and last name, not "Dear Customer" or "Valued Member."
  3. Hover before you click — don't tap. On a computer, hovering your mouse over a link (without clicking) shows the real web address in the corner of the screen. If it doesn't say amazon.com, it's fake. On a phone, press and hold the link to preview the address instead of tapping it.
  4. Notice the pressure. Real Amazon emails don't threaten to suspend your account in 24 hours or demand you "act now." Urgency is the scammer's main tool — it's designed to stop you from thinking clearly.
  5. Remember what Amazon will never do. Amazon will never call you asking for your password, ask you to pay with gift cards, request remote access to your computer, or ask for your full Social Security number by phone or email.

What To Do Instead of Clicking

If you get a message like this — real or not — don't click any link or call any number in the message itself. Instead:

  • Open a new browser tab or the Amazon app and log in directly, typing amazon.com yourself.
  • Check your order history to see if the order in question actually exists.
  • Check "Your Account" > "Message Center" for any real notifications, since scam emails don't show up there.
  • If nothing matches what the email described, it's fake. Delete it, or better, report it (see below).

This single habit — always going to the website yourself instead of clicking through — stops nearly every version of this scam, no matter how convincing the email looks.

How to Report an Amazon Impersonation Scam

Amazon has a dedicated address for this: forward the suspicious email to stop-spoofing@amazon.com, then delete it. You can also report the message to the FTC at ReportFraud.ftc.gov and, if you clicked a link or gave out information, to the FBI's Internet Crime Complaint Center at IC3.gov. Reporting doesn't just protect you — it helps investigators track and shut down the networks running these scams.


If You Already Clicked, Called, or Gave Out Information

Mistakes here are common and nothing to be embarrassed about — these emails are built by professionals to fool careful people. What matters most is what you do in the next hour:

  • Change your Amazon password immediately, and your email password too if you used the same one anywhere else.
  • Turn on two-step verification in Amazon's account security settings so a password alone isn't enough to get in.
  • If you gave out a credit card number, call your bank or card issuer right away to freeze or reissue the card.
  • If you installed any software at a scammer's direction, disconnect the computer from the internet and have it checked by someone you trust, or a reputable repair service — remote-access tools can let a scammer back in later even after the call ends.
  • If you purchased gift cards as part of the scam, contact the gift card issuer immediately; some can freeze the balance if reported quickly enough.

Identity Monitoring That Catches What You Might Miss

A single Amazon password can unlock more than most people realize — if it's reused anywhere else, or if the scammer gathered enough personal details during the call, that information can resurface weeks or months later in a new account opened in your name, a fraudulent tax filing, or a loan application you never made. That's the real risk with this scam: the damage doesn't always show up immediately.

Aura monitors your Social Security number, bank accounts, and personal information around the clock, and sends an alert the moment something looks wrong — rather than leaving you to discover it months later on a credit card statement or credit report. It bundles that monitoring with a VPN and antivirus protection in one app, and includes up to $1 million in identity theft insurance if fraud does slip through.

Already worried you clicked something you shouldn't have?

Aura monitors your Social Security number, bank accounts, and personal information around the clock, and backs it up with up to $1 million in identity theft insurance.

Learn More

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.

A Safer Habit for Every Order Email Going Forward

The scammers behind these emails are counting on the fact that most people are busy and don't stop to check a sender address or hover over a link. Building the opposite habit — always logging in to Amazon directly instead of clicking through an email — takes a few extra seconds and closes off nearly every version of this scam permanently.

It's also worth thinking about what happens on the other end of any link you do decide to check. If you ever want to verify a suspicious email by visiting a website, doing so over an encrypted connection matters, especially if you're checking email on public Wi-Fi at a library, doctor's office, or coffee shop. NordVPN encrypts the connection between your device and the internet so that data passing between them can't be intercepted by someone else on the same network, and it currently offers 100% off your first month if you'd like to try it.

If you've been targeted by this scam or caught it before it caused any damage, share this guide with a friend or family member — the same email is landing in thousands of inboxes today, worded almost exactly the same way.


Sign up for ClearShield's free weekly safety alert and get the latest scam patterns targeting seniors, explained in plain English, delivered to your inbox before they reach you.

Subscribe to the ClearShield Safety Alert →

amazon scamphishingemail safetyseniorsidentity theft