amazon scam email showing in message centre

visi

I received one of the usual Amazon scam emails telling me I had purchased an Amazon device (which I haven't)  I went onto the Amazon website and looked in the message centre and the message is on there too!  They all say that the correct way to check if the email is from Amazon is to look in the message centre!  
I don't know if this means there is an employee of Amazon doing this from inside?
Anyway, I want to warn people that going to the Message Centre does not prove anything!
I'm not sure whether I need to 1) change my Amazon password and/or  cancel all my credit cards or do I not need to do this as I did not click on any of the links.

marcia_

visi said:

I received one of the usual Amazon scam emails telling me I had purchased an Amazon device (which I haven't)  I went onto the Amazon website and looked in the message centre and the message is on there too!  They all say that the correct way to check if the email is from Amazon is to look in the message centre!  
I don't know if this means there is an employee of Amazon doing this from inside?
Anyway, I want to warn people that going to the Message Centre does not prove anything!
I'm not sure whether I need to 1) change my Amazon password and/or  cancel all my credit cards or do I not need to do this as I did not click on any of the links.

 Change your passwords anyway, it's likely not an inside job. 

 Have you spoken to Amazon about it? 

 Have you rang your bank or received a notification from a banking app that a payment has gone out? 

M25

visi said:

...I did not click on any of the links.

If you get an email from an unexpected source don't open it. When you open an email it can send a pull request from an embedded image. This means the sender knows you opened the email. Treat emails like your front door.

Delete the email.

I find it highly unlikely that this was fraud either as there's been no fraud. Keep an eye on your banking obviously.

MattMattMattUK

If the email is within your Amazon account as well then that means the email is legitimately and it is likely your Amazon account is compromised. Change your password, enable 2FA and the change the password with any site or service where you reused that password or a very similar password. Check your Amazon purchase history including viewing hidden purchases and look at the Amazon devices tab to see where your account is logged in and remove any that are not you.

flaneurs_lobster

MattMattMattUK said:

If the email is within your Amazon account as well then that means the email is legitimately and it is likely your Amazon account is compromised. Change your password, enable 2FA and the change the password with any site or service where you reused that password or a very similar password. Check your Amazon purchase history including viewing hidden purchases and look at the Amazon devices tab to see where your account is logged in and remove any that are not you.

I'd add that having a payment method attached to your account may not be wise - I've removed mine and now put up with the inconvenience of entering card details when making purchases.

Eyeful

flaneurs_lobster said:

MattMattMattUK said:

If the email is within your Amazon account as well then that means the email is legitimately and it is likely your Amazon account is compromised. Change your password, enable 2FA and the change the password with any site or service where you reused that password or a very similar password. Check your Amazon purchase history including viewing hidden purchases and look at the Amazon devices tab to see where your account is logged in and remove any that are not you.

I'd add that having a payment method attached to your account may not be wise - I've removed mine and now put up with the inconvenience of entering card details when making purchases.

I can only agree.
That small inconvenience, adds big peace of mind i think.

flaneurs_lobster

Eyeful said:

flaneurs_lobster said:

MattMattMattUK said:

If the email is within your Amazon account as well then that means the email is legitimately and it is likely your Amazon account is compromised. Change your password, enable 2FA and the change the password with any site or service where you reused that password or a very similar password. Check your Amazon purchase history including viewing hidden purchases and look at the Amazon devices tab to see where your account is logged in and remove any that are not you.

I'd add that having a payment method attached to your account may not be wise - I've removed mine and now put up with the inconvenience of entering card details when making purchases.

I can only agree.
That small inconvenience, adds big peace of mind i think.

I've heard enough stories now about phantom Amazon purchases that I'm now using a one-time-only debit card on there. I'd previously only bothered with this on sites that I'd never heard of or thought might be dodgy.

Brie

M25 said:

visi said:

...I did not click on any of the links.

If you get an email from an unexpected source don't open it. When you open an email it can send a pull request from an embedded image. This means the sender knows you opened the email. Treat emails like your front door.

Delete the email.

I find it highly unlikely that this was fraud either as there's been no fraud. Keep an eye on your banking obviously.

Whilst I agree in principle sometimes it's hard to tell if an email isn't something you were expecting.  I signed up to an online company and started getting emails from "Emma".  Turns out that's the name they use for their promotion team.  Other companies do other similar things.  Furthermore I can't report something as phishing or block the sender without opening the email so wondering how to get around this!

Eyeful

flaneurs_lobster said:

Eyeful said:

flaneurs_lobster said:

MattMattMattUK said:

If the email is within your Amazon account as well then that means the email is legitimately and it is likely your Amazon account is compromised. Change your password, enable 2FA and the change the password with any site or service where you reused that password or a very similar password. Check your Amazon purchase history including viewing hidden purchases and look at the Amazon devices tab to see where your account is logged in and remove any that are not you.

I'd add that having a payment method attached to your account may not be wise - I've removed mine and now put up with the inconvenience of entering card details when making purchases.

I can only agree.
That small inconvenience, adds big peace of mind i think.

I've heard enough stories now about phantom Amazon purchases that I'm now using a one-time-only debit card on there. I'd previously only bothered with this on sites that I'd never heard of or thought might be dodgy.

Who is the one time only debit card from and where did you find out about it?
I understand they are around in the USA but did not realise they are now available in the UK.

MattMattMattUK

Eyeful said:

flaneurs_lobster said:

Eyeful said:

flaneurs_lobster said:

MattMattMattUK said:

If the email is within your Amazon account as well then that means the email is legitimately and it is likely your Amazon account is compromised. Change your password, enable 2FA and the change the password with any site or service where you reused that password or a very similar password. Check your Amazon purchase history including viewing hidden purchases and look at the Amazon devices tab to see where your account is logged in and remove any that are not you.

I'd add that having a payment method attached to your account may not be wise - I've removed mine and now put up with the inconvenience of entering card details when making purchases.

I can only agree.
That small inconvenience, adds big peace of mind i think.

I've heard enough stories now about phantom Amazon purchases that I'm now using a one-time-only debit card on there. I'd previously only bothered with this on sites that I'd never heard of or thought might be dodgy.

Who is the one time only debit card from and where did you find out about it?
I understand they are around in the USA but did not realise they are now available in the UK.

Revolut have offered them for a few years now, maybe longer.

flaneurs_lobster

MattMattMattUK said:

Eyeful said:

flaneurs_lobster said:

Eyeful said:

flaneurs_lobster said:

MattMattMattUK said:

If the email is within your Amazon account as well then that means the email is legitimately and it is likely your Amazon account is compromised. Change your password, enable 2FA and the change the password with any site or service where you reused that password or a very similar password. Check your Amazon purchase history including viewing hidden purchases and look at the Amazon devices tab to see where your account is logged in and remove any that are not you.

I'd add that having a payment method attached to your account may not be wise - I've removed mine and now put up with the inconvenience of entering card details when making purchases.

I can only agree.
That small inconvenience, adds big peace of mind i think.

I've heard enough stories now about phantom Amazon purchases that I'm now using a one-time-only debit card on there. I'd previously only bothered with this on sites that I'd never heard of or thought might be dodgy.

Who is the one time only debit card from and where did you find out about it?
I understand they are around in the USA but did not realise they are now available in the UK.

Revolut have offered them for a few years now, maybe longer.

That's the one I use (and the only one I'm aware of).