In short
Amazon says it will only take payment on its website, in its app or in its physical stores, never over the phone or by email, and it will never ask you to buy gift cards. It also says it will not ask you to install software or give remote access to your device to get customer service.
Most common fake: Fake order confirmations or shipping updates for purchases you did not make.
Safest check: Open the Amazon app or type the Amazon website address yourself and check Your Orders.
What Amazon says
Amazon says it will only take payment on its website, in its app or in its physical stores, never over the phone or by email, and it will never ask you to buy gift cards. It also says it will not ask you to install software or give remote access to your device to get customer service. Source: Amazon
Common fake Amazon messages
- Fake order confirmations or shipping updates for purchases you did not make
- Calls or messages claiming a problem with your account that needs your password or a one-time code
- Fake refund offers or product recall emails with links to non-Amazon websites
- Requests to pay with gift cards or to install remote access software
- Job offers promising high daily pay for simple remote tasks
Amazon's real web addresses
Genuine Amazon links and emails use these domains. Look at the part just before the first single slash: amazon.com is real, but amazon-support-center.com or amazon.com.account-check.top are not.
- amazon.com
- amazon.jobs
Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.
How to check a Amazon message safely
- Open the Amazon app or type the Amazon website address yourself and check Your Orders
- Look in the Message Center in your Amazon account, where genuine Amazon messages also appear
- In Gmail, Yahoo and other common email apps, look for the Amazon smile logo icon next to genuine Amazon emails
- Do not call phone numbers from an unexpected text or email, contact Amazon through its app or website instead
How to report a fake Amazon message
- Report a suspicious message, call or website using the report a scam page at amazon.com/reportascam. Official details on trustworthyshopping.aboutamazon.com
- Email reportascam@amazon.com, which also works if you are not an Amazon customer. Official details on trustworthyshopping.aboutamazon.com
Also report it to the official fraud service in your country. See the worldwide list.
If you clicked, paid or shared details
Act quickly. It makes a difference.
- If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
- If you entered a password, change it on the real Amazon website or app and turn on two-step verification.
- Expect follow-up calls or messages pretending to help. Never share one-time codes or move money to a "safe account".
- Report the scam, then delete the message.
More help: Phishing links and fake login pages and what to do after a scam.
Questions people ask
Does Amazon send messages asking for payment or personal details?
Amazon says it will only take payment on its website, in its app or in its physical stores, never over the phone or by email, and it will never ask you to buy gift cards. It also says it will not ask you to install software or give remote access to your device to get customer service.
How can I check if a Amazon message is real?
Open the Amazon app or type the Amazon website address yourself and check Your Orders. Look in the Message Center in your Amazon account, where genuine Amazon messages also appear. In Gmail, Yahoo and other common email apps, look for the Amazon smile logo icon next to genuine Amazon emails. Do not call phone numbers from an unexpected text or email, contact Amazon through its app or website instead.
How do I report a fake Amazon message?
Report a suspicious message, call or website using the report a scam page at amazon.com/reportascam. Email reportascam@amazon.com, which also works if you are not an Amazon customer.
I clicked a link in a fake Amazon message. What should I do?
Don't enter anything else. If you typed card or bank details, call your bank now using the number on your card. If you entered a password, change it on the real website and turn on two-step verification. Then report the message and delete it.
Official sources and further reading
We check our pages against official advice from the organisations themselves and from government agencies.