"Suspicious Amazon purchase": the fake call or text to "cancel" it

"Suspicious Amazon purchase": the fake call or text to "cancel" it

"This is Amazon. We've detected a suspicious purchase of an iPhone 16 for $1,299 on your account. Press 1 to speak with a representative." Or a text: "Your Amazon order #113-... has been confirmed. If you didn't make this purchase, call this number." Your first instinct is to stop the charge. That's exactly what the scammers want. Amazon impersonation is one of the most reported business impersonation scams in the US, and the rule to beat it is simple: check your orders only in the Amazon app or website, and never through the call or the number in the message.

How does this scam work?

1. The alarm. An automated call, a text, or an email reports an expensive purchase you didn't make, a problem with your account, or a "suspicious login."
2. The contact. They ask you to press 1, call a number, or tap a link. On the other end, a "customer service agent" or "fraud department" answers.
3. The trap. To "cancel the order" or "secure your account," they ask you for one of these:
   • your Amazon password or a verification code sent to your phone;
   • your card or bank details "to process the refund";
   • installing a remote access app (AnyDesk, TeamViewer, or similar) "to fix it";
   • buying gift cards or moving money to a "safe account" because your account has been "compromised."
4. The escalation. Some scammers then transfer you to a fake "bank" or "federal agent" who convinces you to move your savings. The FBI calls this the "phantom hacker" scam.

What are the warning signs?

• A purchase you don't recognize that doesn't appear in your orders when you check the app yourself.
• A robocall with "press 1."
• A text or email with a phone number to call to cancel.
• They ask for passwords, codes, or card details.
• They want remote access to your computer or phone.
• They ask for payment in gift cards or a transfer to "protect" your money.
• Urgency: "the charge will go through in 30 minutes."

What do I do right now if they call or the text arrives?

1. Hang up or don't reply. Don't press any keys and don't call the number in the message.
2. Open the Amazon app or type amazon.com yourself. Check "Your Orders" and your messages in "Message Center." If the purchase isn't there, it doesn't exist.
3. If you want to talk to Amazon, use the customer service options inside the app or website. Don't use numbers from search results ads or texts.
4. Never install software or share codes with someone who contacted you.
5. Delete the text and forward it to 7726 (SPAM).

What if I've already given details or installed the app?

• If you gave your Amazon password or a code: change your password from the official app, turn on two-step verification, and check your saved addresses, payment methods, and recent orders.
• If you gave card or bank details: call your bank or card issuer using the number on your card, block the card, and dispute any charges.
• If you installed a remote access app: disconnect from the internet, uninstall it, change your passwords from another device, and have the device checked.
• If you bought gift cards: contact the company that issued them right away with the card numbers and receipts.
• If you moved money "to protect it": call your bank immediately and report it as fraud.

Where do I report it and who can help me?

• To Amazon, through the "report something suspicious" options in its help pages or in the app.
• To the FTC, at ReportFraud.ftc.gov.
• To the FBI's IC3 if you lost money.
• If they got your personal information, follow the plan at IdentityTheft.gov.
• In NoCall, report the number in the spam numbers directory.

Frequently asked questions

I don't even have an Amazon account. Why did they call me? These are mass calls and texts: they reach thousands of people, whether or not they're customers. That alone shows it's a scam.

Does Amazon ever call customers? Amazon may contact you in some situations, but it won't ask for your password, payment by gift cards, or remote access to your device. When in doubt, hang up and check in the app.

The caller knew my name and address. Does that mean it's real? No. That information often comes from data breaches. Knowing your details doesn't make them Amazon.

In short

A fake "suspicious purchase" is designed to make you act out of fear. Check your orders only in the Amazon app or website you open yourself, and never give passwords, codes, card details, or remote access to anyone who contacted you. If you already did, call your bank and change your passwords. And report the number in the NoCall spam numbers directory to warn others.