As Online Sales Soar During Pandemic, Cybercrooks Pose as Amazon

Woman loses $13,300 to scammers

Here are more recent Amazon-related frauds reported to AARP's fraud helpline.

• A woman received an email purporting to be from Amazon and responded by revealing her Social Security and credit card numbers and giving a stranger remote access to her computer and iPad.
• A second woman received a phishing email July 21 from “Amazon Security Team.” The email, featuring Amazon's logo, said a charge of $732 had been processed on her account. She had not made the charge, and the alert came from an email address ending in “.ng,” signifying Nigeria. The email said her account was locked but could be unlocked — and the money refunded — if she sent her address and complete credit or debit card number. She declined and reported the incident to the FBI's Internet Complaint Center.
• A third woman received an alert on Messenger that said her Amazon account had been compromised and she needed to call a certain phone number. Her caller ID displayed Apple Mobile Support. The caller told her she had to buy gift cards to claim codes to reestablish her account. She bought gift cards worth $13,300 and revealed their numbers.

Regrettably, that money is probably gone for good, says Amy Nofziger, AARP director of Fraud Victim Support, who oversees the helpline. She says the dismay and distraction people feel amid blaring headlines about the coronavirus are what scammers count on as they lie, cheat and steal. The crooks are playing on people's anxiety while hiding behind the credibility of Amazon's brand, she adds.

Amazon won't detail scope of the problem

Amazon, an online behemoth with $281 billion in sales in 2019, has long been an attractive target for fraudsters. The Seattle-based company, however, does not disclose the scope of the problem or whether fraud reports have increased since the pandemic-triggered boom in online buying.

AARP's helpline reports a jump in complaints about frauds tied to online sales in April, May and June, compared with earlier in the year, Nofziger says. Here's her advice:

• Beware of phony websites and phone numbers for Amazon. The actual toll-free customer-service number is 888- 280-4331.
• Don't necessarily trust phone numbers that turn up during an internet search. For your credit card, use a customer-service number on the back of the card or on a statement.
• Hang up on unsolicited phone calls. Do not click suspicious hyperlinks.
• Don't always believe what appears on caller ID, since calls can be spoofed. Never give a stranger remote access to your computer, since the person can “wreak havoc and steal your personal information,” Nofziger warns.

Masquerading as customer service

At Censys, an Ann Arbor, Michigan–based internet security firm, IT manager Mike Toole says con artists who pose as Amazon Prime customer support or Amazon security team members often use phishing emails or spoofed caller ID numbers.

Fraudsters try scare consumers into giving up personal information with fake security alerts, like this one purporting to be from Amazon, says Theresa Payton of Fortalice, a cybersecurity firm. Nefarious crooks may utilize “burner emails” for a short time, then abandon them, and even the savviest of digital shoppers have been victims of such fraud, she says.

Redacted by AARP

Theresa Payton, CEO of Fortalice Solutions, a cybersecurity consultancy in Charlotte, North Carolina, suggests that consumers consider using one credit card for all online purchases, to be better able to spot potential fraud. Meantime, they should consider setting up alerts for all card transactions, she says.

Advice from the real Amazon

Amazon, for its part, advises consumers to watch for scams by looking for misspelled words in unsolicited emails, requests to update payment information and prompts to install software on their computer.

Amazon never sends unsolicited emails asking for sensitive information like your Social Security or tax-ID number or bank account number.

Use this link to file an online report to Amazon about spoofing and suspicious emails.

Here's more from Amazon on fraud.

Looking back, the 81-year-old retired educator has learned important lessons about how unscrupulous and persuasive cyberthieves can be. “It all sounded so plausible,” he says of their web of deceit. “I've always thought, I'm too smart to be fooled. But they make you think something bad is going to happen if you don't go along, no matter how many red flags go up."