Hacked Amazon Account

Lip_Stick

Seems a bit weird that the order is toothbrushes which are then delivered to a dentist.
I'm not saying you've made this up, (unlike certain people who treat forums like a Poirot novel). It's just a rather random thing to be ordered and a strange coincidence that the delivery pairs with it. I actually think I'd be ringing that dentist up to see what's going on. I wonder if it is a strange glitch, but never heard of it before with Amazon.

Oh, and they can cancel parcels once out for delivery. I tried to cancel a parcel at the distribution stage before it got actually sent out and it was too late, but I was actually able to cancel it once it had set off on the morning of delivery (I have Prime too).

Takmon

Gillian37 said:

I have removed any stored card details so it can’t happen again and also intend to !!!!!! my account. Doesn’t get me my money back though. As far as I am aware it is only my Amazon account that has been compromised.

Did you use the same password on any other site?

Gillian37

I use different passwords for different accounts. I have my suspicions that the dentists address was used in the assumption that it would not be open on a Saturday so the person in question could just wait for delivery person to pull up and take it off them maybe? I have sent numerous emails to Amazon asking why they could not stop the order and every time their response has been because it was already being processed despite the short time that occurred between the order being placed and me notifying them. Trust me if I was making any of this up I would not be spending time asking for help on this forum. I have contacted national fraud line and citizens advice to try and get help. I have not tried contacting the address (or even googled it to see if I can find a contact number to ring but can’t see a dentist ordering electric toothbrushes via Amazon as assume they would be able to source them cheaper plus why would they order one on prime delivery and the other two with standard delivery and not all together 🤷‍♀️

Gillian37

Further update I googled the address of the dentist and in the reviews someone else had the same thing happened to their account!

minty777

Order something then remove your card from your account.

Gillian37

Surprisingly Amazon manage to stop that immediately as I found out when my account accidentally defaulted to an expired card without me realising! Got an email few hours later to say my order was temporarily suspended as my payment method was invalid. Seems they have every base covered to protect themselves just not their customers.

gwynfil

Sorry for the long response. A quick summary of topics covered in this are
Amazon and hacking issues
Amazon and fraudulent purchases and transactions
Amazon and recurring payment system
Amazon Prime mis-selling
Amazon and data protection
Amazon Customer service

My husband had his Amazon account 'hacked' in to (I say that as it felt like an internal security hack/issue).  The hacker/scammer ordered two £50 Amazon gift cards and some cheapish items, some items which may have been in my husband's Amazon search history so as not to look suspicious . The scammers were after the gift cards I suspect as there must be a massive market for Amazon gift cards in the criminal world. We hadn't ordered or authorised them and he got no notification emails about these purchases  and no record in his purchase history on his account.  The scammer received the gift card I suspect through another email or address and used our address to send a cheap toy to, again to avoid suspicion.  The first my husband knew about the fraud was on checking his bank account and finding unknown Amazon International transactions. When contacted, Amazon managed to stop one order as they have the purchase history details their end, and my husband contacted his bank and cancelled his card but has lost out on about £60. Some people have lost thousands of pounds. What my husband found odd, was that he had not ticked any box to store his card details on Amazon and certainly not authorised use of his card without the 3 digit security code.  I wonder if the mis-selling of prime at the checkout, allows card details to be stored in this way as they count it as a subscription service and put it in a recurring payment system. I don't think Amazon customers realise the risk Amazon is putting them in by using the recurring payment stored card details that do not require any security checks or 3 digit security code.  Martin Lewis did a show on ITV with a segment on recurring payment systems and many people don't know they are signed up to one. This feature of Amazon's system, makes it easier  for scammers to spend the funds in your bank account as no 3 digit security code is required. My husband is still waiting to hear back from the bank - the fraud against him was in November 2020. Sorry I can't offer you more advice going forward, but just to let you know this is a big problem at Amazon. We don't use them any more as the risk to have your bank account details stored with no security checks makes it a hacker and scammers paradise. Also, banks may be changing their terms about how much/if they will refund on online crime which I read in the news only last week. We have learnt the hard way- never let a company store your card details if they don't use the 3 digit code as a check. I would like Amazon to change the way it treats customers. Every consumer programme I watch, there seem to be security issues with Amazon and when contacting them, it just seems like another outsourced lot of disgruntled employees, who couldn't care less about preventing fraudulent action on Amazon.  There have been lots of TV programmes about Amazon recently and I think maybe Amazon and fraud would be a good topic for someone to do. Many other large companies have been fined and held accountable for data protection hacks- why not Amazon? 

MattMattMattUK

gwynfil said:

Many other large companies have been fined and held accountable for data protection hacks- why not Amazon? 

As far as we are aware Amazon have not suffered any "data protection hacks". What has happened is some Amazon customers have re-used passwords from different sites or been caught out by phishing attacks, but that is the customer's fault, not the fault of Amazon. 

born_again

gwynfil said:

Sorry for the long response. A quick summary of topics covered in this are
Amazon and hacking issues
Amazon and fraudulent purchases and transactions
Amazon and recurring payment system
Amazon Prime mis-selling
Amazon and data protection
Amazon Customer service

My husband had his Amazon account 'hacked' in to (I say that as it felt like an internal security hack/issue).  The hacker/scammer ordered two £50 Amazon gift cards and some cheapish items, some items which may have been in my husband's Amazon search history so as not to look suspicious . The scammers were after the gift cards I suspect as there must be a massive market for Amazon gift cards in the criminal world. We hadn't ordered or authorised them and he got no notification emails about these purchases  and no record in his purchase history on his account.  The scammer received the gift card I suspect through another email or address and used our address to send a cheap toy to, again to avoid suspicion.  The first my husband knew about the fraud was on checking his bank account and finding unknown Amazon International transactions. When contacted, Amazon managed to stop one order as they have the purchase history details their end, and my husband contacted his bank and cancelled his card but has lost out on about £60. Some people have lost thousands of pounds. What my husband found odd, was that he had not ticked any box to store his card details on Amazon and certainly not authorised use of his card without the 3 digit security code.  I wonder if the mis-selling of prime at the checkout, allows card details to be stored in this way as they count it as a subscription service and put it in a recurring payment system. I don't think Amazon customers realise the risk Amazon is putting them in by using the recurring payment stored card details that do not require any security checks or 3 digit security code.  Martin Lewis did a show on ITV with a segment on recurring payment systems and many people don't know they are signed up to one. This feature of Amazon's system, makes it easier  for scammers to spend the funds in your bank account as no 3 digit security code is required. My husband is still waiting to hear back from the bank - the fraud against him was in November 2020. Sorry I can't offer you more advice going forward, but just to let you know this is a big problem at Amazon. We don't use them any more as the risk to have your bank account details stored with no security checks makes it a hacker and scammers paradise. Also, banks may be changing their terms about how much/if they will refund on online crime which I read in the news only last week. We have learnt the hard way- never let a company store your card details if they don't use the 3 digit code as a check. I would like Amazon to change the way it treats customers. Every consumer programme I watch, there seem to be security issues with Amazon and when contacting them, it just seems like another outsourced lot of disgruntled employees, who couldn't care less about preventing fraudulent action on Amazon.  There have been lots of TV programmes about Amazon recently and I think maybe Amazon and fraud would be a good topic for someone to do. Many other large companies have been fined and held accountable for data protection hacks- why not Amazon? 

You are aware that Amazon do not require the CVV for any purchase.
Just the same as any other company can choose to either ask or not ask for it.
Also it is against the card regulations for a retailer to store the CVV.

Clearly given someone accessed the account, either the security details were the same as another website that had been compromised, or had been gleaned by Phishing.

As someone who works in a fraud environment. Amazon is a retailer that very rarely crops up & when they do 9 times out of 10 it is a family member, who's card has expired and it has defaulted to a previously used card that is still live.

robatwork

Just for info @gwynfil , I couldn't face that big wall of text so didn't read. I know I'm not the only one...