Be on the Lookout: Amazon Prime Scam Targets Millions of Shoppers

Amazon has issued a major warning to its 200 million customers after a surge in sophisticated scams targeting Prime members.

If you've recently received an email claiming your Amazon Prime subscription is about to renew at an unexpected price or urging you to cancel, it could be part of a widespread phishing scheme designed to steal your personal information.

At Morgan & Morgan, we’re committed to protecting everyday consumers from deceptive and harmful practices. Here's what you need to know about this scam, how to avoid falling for it, and what legal steps you can take if your information has been compromised.

What’s Going On With the Amazon Scam Emails?

Cybercriminals are impersonating Amazon through convincing emails that claim your Prime membership is about to renew, sometimes at an inflated or unexpected rate. 

These messages often contain a “Cancel Subscription” button that, when clicked, leads to a fake Amazon login page.

If you enter your credentials on the fake site, scammers gain access not only to your Amazon account but potentially to other accounts where you use the same email and password. Some versions of the scam even ask for your credit card or bank information, which can be used or sold on the dark web within minutes.

Why This Scam Works

Amazon’s customer base is massive, and many users expect regular communication about their Prime subscriptions. That makes this scam particularly effective, especially when scammers personalize emails with stolen details to make them seem more legitimate.

Unfortunately, once a scammer has your login information or payment details, the damage can escalate quickly.

How to Protect Yourself

Amazon and cybersecurity experts have offered several best practices to help you avoid falling victim:

• Don’t click on links in suspicious emails. If you’re unsure about a message, go directly to Amazon.com and check the Message Center in your account. Any legitimate notifications from Amazon will appear there.
• Enable two-step verification. This adds an extra layer of security to your Amazon account and prevents unauthorized access even if someone has your password.
• Be cautious about the information you share online. Scammers often gather personal details from social media, data breaches, or the dark web to make phishing attempts more convincing.
• Use web protection tools. Install browser extensions or antivirus software that can block known phishing sites, like the fake "amazons.digital" site flagged by Malwarebytes.
• Monitor your financial accounts. If you suspect you’ve entered personal information on a fraudulent site, check your credit card and bank accounts for any unusual activity. Notify your bank or credit card company immediately if you notice anything suspicious.
  
   

What to Do if You’ve Been Scammed

If you’ve already clicked on a phishing link or entered your information into a fake Amazon page:

1. Change your Amazon password immediately. If you use that password anywhere else, change it there too.
2. Report the scam to Amazon. Forward the suspicious email to stop-spoofing@amazon.com.
3. Notify your bank or credit card provider. They can help monitor for fraud, block charges, and issue new cards.
4. Check your credit report. Look for any new accounts or credit inquiries you don’t recognize.
5. Consider freezing your credit. This can prevent scammers from opening new accounts in your name.
6. Document everything. Keep a record of the email, any communications, and any financial damage. It could be important if legal action becomes necessary.
   
    

Can I Take Legal Action if I’ve Been Scammed by Fake Amazon Notices?

If your financial information was stolen and used fraudulently, or if you suffered losses due to poor cybersecurity practices from a third party, you may have legal recourse. In some cases, victims of phishing scams have successfully pursued legal claims for:

• Identity theft
• Unauthorized transactions
• Negligent data handling by third parties
• Inadequate fraud protection

Falling for a phishing scam can feel embarrassing, but you're far from alone. Millions of people every year are targeted by increasingly convincing schemes, especially ones impersonating trusted companies like Amazon.

At Morgan & Morgan, our consumer protection attorneys are ready to evaluate your situation and determine if you may be entitled to compensation. We’ve fought and won cases involving data breaches, identity theft, and corporate negligence. We don’t just go after scammers; we hold companies accountable when they fail to protect your personal information.

If you’ve been impacted by this or a similar scam, contact us today for a free case evaluation.