JUMP TO:
CATEGORY
TEXT
TYPE
Phishing: a message that attempts to trick you into clicking a link or downloading a file so attackers can steal your info
CONTENT
Amazon logo
“Security Notice
Your account is logged in from Mumbai, India.
If this is not from you, please verify your account in the secure link below.”
HOW IT USUALLY WORKS
Hook: The attacker sends a fake “security notice” claiming your Amazon account was accessed from another country (e.g., Mumbai, India).
Engagement: The message urges you to click a link to “verify your account.” If you do:
You’re taken to a fake Amazon login page designed to steal your email and password.
Some versions may also request credit card details, billing address, or other sensitive info.
Outcome: Attackers gain access to your Amazon account (and any saved payment methods) or your personal data, which can then be used for identity theft, financial fraud, or sold on the dark web.
WHAT TO DO
DO NOT CLICK THE LINK
• Never open links or download attachments from suspicious texts or emails.
Check your Amazon account directly
• Open a browser and go to amazon.com (don’t use the link in the message).
• Sign in to your account.
• Navigate to Accounts & Lists → Your Account → Devices.
• Check for any unfamiliar devices.
• If you see anything suspicious, change your password immediately, and then Deregister the suspicious device.
Enable 2-step verification (if it’s not currently active)
• Go to Login & security in your Amazon account.
• Turn on 2-step verification (2SV) so you get a text or app code every time someone logs in. This prevents unauthorized access even if someone has your password.
If you clicked the link and entered your password:
• Change your Amazon password right away.
• Also change passwords on any other accounts where you reused the same one.
• Keep an eye on your bank or card statements linked to Amazon.
— BONUS ROUND: Report the Scam to Amazon —
Take a screenshot and email it to [email protected], or report it through your mobile carrier by forwarding the text to 7726 (SPAM).
Be sure to include the original sender’s info if possible.
Disclaimer: The information in this database is shared to help raise awareness about common scams. It is not legal, financial, or security advice, and we cannot guarantee its accuracy or completeness. Please use your own judgment and contact official authorities or service providers if you believe you’ve been targeted by a scam.
