A
Amazon
Highly aggressive "Unusual Order" and "Prime Membership Problem" phishing lures harvesting credentials and payment details.
Official indicators
A
Amazon<shipment-tracking@amazon.com>
To: you@example.com
For your security, please Visit Amazon Message Center to complete this action.
Original URL: https://www.amazon.co.nz/gp/message-central. Click or tap if you trust this link.
What real Amazon messages look like
- Official emails come strictly from
@amazon.comor@amazon.co.nz - Amazon will never ask for your password or personal information by email
- They will never ask you to install software or "remote access" your computer
- Verify all orders and messages in your account Message Center
Common spoof patterns
- "Action Required: Your Prime membership has been cancelled" phishing
- "Order Confirmation" for high-value items (e.g. iPhone) you did not buy
- "Unusual login activity" alerts driving you to a lookalike login page