"Suspicious Amazon purchase": the fake call or text to "cancel" it

"Suspicious Amazon purchase": the fake call or text to "cancel" it

"This is Amazon. A purchase of an iPhone 16 for $1,899 has been made on your account. If you didn't authorise this, press 1 to speak to an agent." The call is a recording, or it's a text with a number to ring or a link to click. Your heart sinks, and you want to stop the charge. That reaction is exactly what the scam is built on. Amazon doesn't call you out of the blue about a suspicious purchase and ask you to press 1, pay anything, install software or read out codes. The same script is used with the names of PayPal, Apple, eBay, Netflix and big Australian retailers.

How does this scam work?

1. The alert. An automated call, a text or an email about an expensive order, a subscription renewal or a "suspicious login". The amount is high enough to worry you.
2. The "agent". You press 1 or call the number given and reach a friendly, professional-sounding "Amazon security team" member. They already know your name, sometimes your email.
3. The "fix". To cancel the order, they need to "verify your identity": your card details, your Amazon password, the code you're about to receive by text. Or they ask you to install AnyDesk or a similar app so they can "check your account", or log into your online banking "to process the refund".
4. The payoff. With the card, codes or remote access, they make real purchases, buy gift cards, transfer money, or add your card to their digital wallet. In the refund version, they fake an "overpayment" and ask you to send the difference back.

What are the warning signs?

• An unexpected call or text about a purchase you didn't make, especially with "press 1".
• They ask for card details, passwords or one-time codes. Amazon already has your order details and won't ask you to read out codes.
• They want you to install an app or give remote access.
• They ask you to buy gift cards or transfer money "to secure your account".
• They want you to log into online banking while they're on the line.
• Urgency: "the order ships in 30 minutes", "your account will be locked".
• You don't even have an Amazon account. They call everyone; the brand name is just bait.

What do I do right now if they call or the text arrives?

1. Hang up, or don't call the number in the text. Don't press any keys.
2. Check yourself. Open the Amazon app or go to amazon.com.au by typing the address yourself, and look at Your Orders. If there's no order there, there's no order.
3. Don't give any details or codes and don't install anything.
4. If you're still worried, contact Amazon through the help section of its official app or website.
5. Block the number and report it in the spam numbers directory.

What if I've already given details or installed the app?

Act quickly, in this order:

1. If you installed a remote access app, disconnect the device from the internet and uninstall the app. Microsoft's guide to tech support scams explains how these remote access tricks work.
2. Call your bank on the number on your card or in its app. Ask them to block the card, check recent transactions and, if you logged into online banking during the call, secure it. If you read out any code, tell them.
3. Change your Amazon password and your email password from a trusted device, and turn on two-step verification.
4. Check your Amazon account for unknown addresses, devices, gift card purchases or changes to your payment methods.
5. If you gave identity details, contact IDCARE on 1800 595 160 for free support.

Where do I report it and who can help me?

• Police, through ReportCyber via the AFP's cybercrime page, if you lost money or gave remote access.
• Scamwatch, the national scam-reporting service.
• Amazon, through the scam-reporting options in its help pages.
• Your phone provider, to report the scam text or call.

Frequently asked questions

Does Amazon ever call me about a suspicious purchase? Amazon may contact customers in some circumstances, but it won't ask you to pay over the phone, install software, buy gift cards or read out codes. If in doubt, hang up and check in the app yourself.

I don't have an Amazon account and they called me anyway. Why? Because these calls are automated and go out to huge lists of numbers. They're betting that many recipients do shop with Amazon.

I only pressed 1 and hung up. Is that a problem? No real harm done, but it tells the dialler your number is answered, so you may get more calls. Block the number and report it.

I gave them my card details but not the text code. Am I safe? Not completely. Card details alone can be used for some online purchases. Call your bank and get the card replaced.

In short

A call or text about a "suspicious purchase" asking you to press 1, share codes or install an app is a scam. Hang up and check your orders in the official app yourself. If you've already shared details, call your bank, change your passwords and report it to ReportCyber and Scamwatch. And report the number in the NoCall spam numbers directory.