Search This Blog, Linked From Here, or The Web

Monday, May 7, 2012

Update on Fake Amazon E-mail Scams

Amazon has provided a special place on their website to assist us as users in helping them combat these scammers. You can alert Amazon of your e-mails by looking here ==> https://www.amazon.com/gp/help/contact-us/report-phishing.html?ie=UTF8&nodeId=&type=&token=

To start off, check the entire link above to ensure that this link will take you to the legitimate Amazon website. You can do so by either looking at this URL very closely (examining the "www.amazon.com" part) to make sure that it correctly spells Amazon and is taking you to the Amazon website. Or you can learn more about how to avoid being scammed and allowing viruses into your computer from these scam e-mails by visiting my blog post located here ==> http://www.wheneverifeellikeit.com/2012/05/fake-amazon-spam-e-mails.html

Amazon sent me this e-mail after I had filled out their phishing report:
Thank you for writing to us to report the spoofed e-mail that you received. We wanted to let you know that we are investigating the situation. To help us with our research, if you still have the spoofed e-mail you received, we'd appreciate it if you could forward it as an attachment to the following e-mail address: stop-spoofing@amazon.com.

Since you did not click on the link in the spoofed e-mail, your account at Amazon.com is fine--there's nothing more you need to do. (Even if you did click on the link and go to the forged web page, but didn't enter anything, the phishers will not have your account information.)

For your protection, we suggest that you never respond to requests for personal information that may be contained in suspicious e-mail. It is best to assume any e-mail that asks for personal financial information (or web site linked to from such an e-mail) is not authentic.

If you encounter any other uses of the Amazon.com name that you think may be fraudulent, please do not hesitate to report them to us again. The Internet is a large and fairly unregulated universe; it is only through our constant vigilance and with the help of people like yourself that we can ensure that our name is not misappropriated for illegitimate uses.

We have included more information below to assist you in identifying e-mail forgeries, along with answers to other questions you might have. If you need additional assistance, please feel free to contact us again.


*****
WHAT SHOULD I DO IF I THINK SOMEONE HAS GAINED UNAUTHORIZED ACCESS TO MY AMAZON.COM ACCOUNT?
Let us know immediately by going to our "Phishing and Spoofed E-mails" contact form and choosing one of the following subject lines: either "I am concerned about my Seller Account" (if you sell items on Amazon Marketplace, Auctions, or zShops) or "I am concerned about my Customer Account."

To find this form, go to our home page then click "Help" in the top right menu. Next choose "Contact Customer Service," then the subject "Phishing or Spoofed E-mails." Click the "E-mail us" button, then choose one of the two subject lines mentioned above.

*****
HOW CAN I UPDATE MY PASSWORD OR CHECK MY ACCOUNT INFORMATION?
If you have any questions about your Amazon.com account, you can view recent activity or update your password at any time. To do this go to our home page then click "Your Account" on the top right menu. To change your password, choose the option "Change your name, e-mail address, or password" under Account Settings. You can check the status on any order by choosing to view "Open and recently shipped orders" under "Where's My Stuff" at the top of the page.

*****
HOW CAN I IDENTIFY A SPOOFED OR FORGED E-MAIL?
The following will help you identify whether the e-mail you received is really from Amazon.com.

1. Amazon.com will *not* ask you for the following information in an e-mail message:

* Your Amazon.com password
* Your bank account information
* Your credit card information or PIN
* Your social security number
* Your mother's maiden name or other information to identify you

2. Amazon.com will *not* ask you to verify or confirm your Amazon.com account information by clicking on a link from an e-mail.

3. Be on the lookout for poor grammar or typographical errors. Some phishing e-mails are translated from other languages or are sent without being proofread. As a result, these messages can contain bad grammar or typographical errors.


4. Check the return address--genuine e-mails come from an e-mail address ending in "@amazon.com." Note that this can be easily forged, so even if it looks like it comes from @amazon.com, it might not be.


5. Check the web site address--genuine Amazon.com web sites are always hosted on the "amazon.com" domain--"
http://www.amazon.com/. . . " (or "https: //www.amazon.com/. . .").

6. Sometimes the link included in spoofed e-mails looks like a genuine Amazon.com address. You can check where it actually points to by hovering your mouse over the link--the actual web site where it points to will be shown in the status bar at the bottom of your browser window or as a pop-up. We *never* use a web address such as "http: //security-amazon.com/. . ." or an IP address (string of numbers) followed by directories such as "http: //123.456.789.123/amazon.com/. . . ."

7. Alternately, sometimes the spoofed e-mail is set up such that if you click anywhere on the text you are taken to the fraudulent web site. Amazon.com will never send an e-mail that does this. If you accidentally click on such an e-mail and go to a spoofed web site, do not enter any information and just close that browser window.

8. When in doubt, go directly to the Amazon.com web site by typing www.amazon.com in your web browser. Click "Your Account" in the top right menu to view any recent activity, or review your account information. If you cannot access your account, or if you see anything suspicious, let us know right away.


*****

WHAT HAS AMAZON.COM DONE TO HELP STOP SPOOFING?
Amazon.com has taken steps to combat e-mail forgeries such as this in the U.S. and Canada; you can read more about our efforts here:

www.amazon.com/stopspoofing

*****

HOW DID THE SPOOFER GET MY E-MAIL ADDRESS?
Amazon.com is not in the business of selling customer information. Many spammers and spoofers use programs that randomly generate e-mail addresses, in the hope that some percentage of these randomly-generated addresses will actually exist.

*****

WHERE CAN I FIND OUT MORE INFORMATION ABOUT SECURITY ON AMAZON.COM?
Visit the "Privacy & Security" section of our Help pages for safe shopping tips, our privacy policy, and more:

http://www.amazon.com/exec/obidos/tg/browse/-/551434/


*****

Thank you again for contacting us.

Best regards,

Amazon.com Customer Service
http://www.amazon.com 

Please note: this e-mail was sent from an address that cannot accept incoming messages.

Remember that these e-mails are not coming from Amazon or if you are getting the YouTube ones, they are not coming from YouTube and Amazon employees...they are coming from scammers who are "spoofing" these e-mail addresses. Basically, this would be the same as someone sending threat letters to someone else with your name and address on the letter. The person receiving the letter would think that you were the one responsible for the letter because it has your name and address on it even though it's not really you.

If you are getting fake YouTube e-mails, check out my post located here ==>  http://www.wheneverifeellikeit.com/2012/04/fake-youtube-spam-e-mails.html

Stay safe out there!

1 comment:

  1. "Hi all,
    This might be different but it is very infomative. I would like to tell you a way how to make anonymous email address by using your primary email addrass and after that don't need to tell anyone your real email address. This is simply fantastic. "
    get anonymous email

    ReplyDelete

By commenting to this blog, you are agreeing to the guidelines, that may change at will, of this page.

Note: Only a member of this blog may post a comment.

There was an error in this gadget

Blog Archive