Amazon Account Suspension Phishing

What Is This Threat?

Amazon is the world's largest online retailer and one of the top five most-phished brands globally. Attackers craft emails that perfectly mimic Amazon's design to create panic about a suspended account, failed payment, or suspicious order — pushing victims to hand over login and card data.

How It Works

You receive an email with Amazon's logo: "Your account has been temporarily suspended" or "Action required: verify your payment method."

A button like "Verify Now" or "Restore Account" links to a fake amazon.com lookalike site.

You enter your email and password. The fake site may then show a fake "one-time password" screen to seem legitimate.

Next comes a full billing update form asking for your card number, CVV, and billing address.

Attackers now have your Amazon login and payment details.

Real Examples

"Your Amazon account has been locked due to too many failed sign-in attempts."

"We noticed an unauthorized purchase of $389 — click to dispute." (creates panic even if you made no purchase)

Fake order confirmation emails for expensive items you didn't order, with a "cancel order" link.

Red Flags

Sender is not @amazon.com — look for @amazon-support.net, @amazon-alerts.com, etc.

Link URL is not amazon.com — hover before clicking.

Asks for full card details to "re-verify" your account.

Generic greeting: "Dear Amazon Customer."