Amazon Phishing Email Scam: Is It Real? How to Tell

Last updated: July 2026

If you’ve had an Amazon email about an order you didn’t place, a payment problem, or an account “on hold,” check it inside your Amazon account before doing anything. The reliable test: Amazon’s Message Center stores every genuine email Amazon sends you. Open a new tab, go to amazon.com (or the app), and check Message Center and Your Orders. If the email isn’t there, Amazon didn’t send it — it’s a phishing scam. Don’t click the email’s links.

Got one in your inbox now? Scan it with ScanTheSender for an instant read.

What this scam looks like

The email copies Amazon’s branding and tries to make you panic. Common versions include:

• An order confirmation for something expensive you never bought, hoping you’ll click “cancel order” and enter your login.
• An account or payment problem — “we couldn’t charge your card, your account is on hold” — with a link to “update” your details.
• A Prime membership renewal or “expired” notice with an “activate” button.
• A refund or gift offer you didn’t expect, leading to a page that harvests card or login details.

An illustrative example (a made-up sample, not a real message):

“There was a problem with your payment method. We’ve placed your account on hold and cancelled pending orders. Verify your details to restore access: [link]”

The link leads to a fake Amazon login or payment page. Whatever you enter goes to the scammer.

How to tell if an Amazon email is a phishing scam

• It’s about an order you didn’t place or a problem you can’t verify inside your account.
• The sender address isn’t a genuine amazon.com address — look for extra characters or misspellings. (Note: addresses can be spoofed, so this alone isn’t proof it’s safe.)
• It uses panic language — “final warning,” “account will be closed,” urgent deadlines. Amazon doesn’t threaten instant closure by email.
• The greeting is generic (“Dear Customer”) rather than your name.
• The link doesn’t go to amazon.com, or starts with a string of numbers.
• It asks for your password, card number, or bank details directly.

What to do right now

1. Don’t click any link or button in the email.
2. Verify inside your account. Go to amazon.com (type it) or open the app, and check Message Center and Your Orders. Genuine Amazon messages appear in Message Center; if it’s not there, it’s fake.
3. Report it. Forward the suspicious email (as an attachment if you can) to reportascam@amazon.com or stop-spoofing@amazon.com, then delete it.
4. In the US, you can also report to the FTC at ReportFraud.ftc.gov. In the UK, report to Action Fraud at actionfraud.police.uk or 0300 123 2040.
5. If you entered your Amazon password on a linked page, change it immediately from the real site and turn on two-step verification. If you entered card details, contact your bank.

FAQ

How do I know if an Amazon email is genuine? Check Amazon’s Message Center. Every real email Amazon sends is stored there. Open amazon.com or the app yourself, go to Message Center, and look for the message. If it’s not there, Amazon didn’t send it, no matter how real the email looks.

I got an Amazon order confirmation for something I didn’t buy — is it a scam? Very likely. This is a common tactic to make you click “cancel” and enter your login. Don’t use the email’s links. Check Your Orders inside your Amazon account — if there’s no such order, the email is fake. Report it and delete it.

The email looked like it came from amazon.com — can it still be fake? Yes. Scammers can spoof the sender address. Genuine Amazon emails come from amazon.com (some inboxes show a “smile” logo), but don’t rely on that alone. Verify through Message Center and Your Orders instead.

I clicked and entered my password. What now? Change your Amazon password right away from the real site, turn on two-step verification, and review your account for orders or address changes you didn’t make. If you entered card details, contact your bank.

Not sure about an Amazon email?

Check an Amazon email free — paste or screenshot it into ScanTheSender, then confirm in your Amazon Message Center.

Related reading: watch for the related fake PayPal payment email scam and Microsoft security alert scam.