Fraud with Amazon: fake order emails and Prime cancellation calls

Quick answer

Scammers pretend to be Amazon with fake order emails and automated calls about a Prime charge. Action Fraud says Amazon never asks for personal information by email. Don't click, don't install anything, and check your order in the Amazon app.

All scam alerts
Comes by
Email, Phone call
Pretends to be
Amazon
Last updated

How it works

Action Fraud, the UK's national fraud reporting service, has described three versions of this scam. Scammers impersonate Amazon, which is a victim here.

  • Fake order email: It claims an expensive order was placed, and says that if you didn't authorise it you can click a help centre link for a refund. The link goes to a fake site that asks for your name, address and bank card details.
  • Account problem email: A phishing email with a link to a genuine-looking site made to steal your Amazon login.
  • Prime cancellation call: An automated call says to "press 1" to cancel a purchase. You're transferred to a fake customer service agent who tries to get remote access to your computer.

Red flags

  • An email about an order you didn't place
  • A link to a "help centre" to claim a refund
  • An automated call about Prime asking you to press 1
  • A request to install software or give remote access to your computer
  • A request for card details or your Amazon login by email
  • A sender address that isn't Amazon's

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown sender to me
Your Amazon order for [item] has been placed. If you did not authorise this transaction, click here to receive a full refund: [link]

What to do

  1. 1

    Don't click, call back or press 1

    Hang up on automated calls, and delete the email.

  2. 2

    Check your orders in the Amazon app

    Go to the app or website yourself and look at your orders and account messages.

  3. 3

    Never install software after a cold call

    Action Fraud advises this. If you gave remote access, disconnect from the internet and get your device checked.

  4. 4

    If you gave card details, call your bank

    Use the number on your card and ask to block it.

  5. 5

    Report it

    Report to Action Fraud (0300 123 2040), or Police Scotland on 101 in Scotland.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers need a way to reach you, and names, phone numbers, email addresses and home addresses are easy to find on people-search sites and data broker listings or in old data breaches. The fewer places your details are listed, the fewer scammers can reach you with a message that looks personal. Serus finds the sites that list you and removes your data, and alerts you when your details show up in a breach.

More Amazon scams

All common Amazon scams

Frequently asked

Does Amazon ask for personal details by email?

Action Fraud says Amazon will never ask for personal information by email.

I pressed 1 on an Amazon Prime call. What now?

Hang up. If you spoke to someone and gave them remote access to your computer, disconnect it from the internet and call your bank.

How do I report a fake Amazon email or call?

Report fraud to Action Fraud at actionfraud.police.uk, or by phone on 0300 123 2040.

Is Amazon behind this?

No. Scammers pretend to be Amazon. Amazon is the company being impersonated.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.