48-Hour Warning to Amazon Customers: Attacks Have Begun

What’s Happening: Why the Warning Was Issued

Amazon recently sent a security alert to its user base (estimated at ~310 million active customers) warning of a spike in “impersonation and phishing” attacks targeting shoppers.

According to a report by Darktrace, phishing attacks mimicking Amazon have surged — in November alone, attacks increased by as much as 620%.

The warning highlights that scammers are exploiting the holiday shopping rush (Black Friday, Cyber Monday, etc.) as more people shop online, making retail-platform users prime targets.

How the Scams Work — What “Attacks” Look Like

Cyber-criminals — often using sophisticated tools including AI — are impersonating Amazon or allied services. Here are common tactics:

Fake emails or texts alerting you of a “delivery issue,” “account suspension,” or “unauthorised purchase,” urging you to click a link or log in. 

Bogus adverts on social media offering unbelievable deals or discounts “on behalf of Amazon.”

Unofficial messages (emails, SMS, chat) requesting personal data — name, password, payment info — or pushing fake “customer-support” calls. 

Links leading to cloned or malicious websites made to look like Amazon, where once you enter credentials your account gets compromised.

Because these tricks look real — good copy, familiar logos, urgent-sounding messages — it’s now harder than ever for users to spot scams.
Why the Risk Is Higher — What Is Driving the Surge

Holiday-shopping season (Black Friday, upcoming Cyber Monday) dramatically increases online activity, making it easier for attackers to hide among legitimate communications.

Cyber-criminals have ramped up their efforts: according to the report, Amazon is the most impersonated global brand in phishing attacks, accounting for around 80% of major retail-brand impersonation attempts.

Attackers are using advanced methods: not just poor-quality spam but AI-powered phishing emails and convincing fake websites — meaning classic red flags like bad grammar or typos no longer guarantee safety.
What Amazon and Experts Are Advising You to Do

To stay safe, customers are encouraged to:

Use only the official Amazon website or mobile app for orders, customer service, delivery tracking — avoid links in unsolicited emails or texts.

Enable two-factor authentication (2FA) or, where available, use passkeys (face, fingerprint or PIN) for login — more secure than regular passwords. 

Never share login credentials, payment info, or verification codes if you receive a suspicious request via email, phone, or social media.

Be highly suspicious of messages claiming urgency — e.g. “your account has been locked” or “your order failed”. Scammers rely on panic and haste. 

Report suspicious messages, numbers or websites. If in doubt, contact Amazon directly or check the official support pages.
What It Means for You — Why This Is a Big Deal

With millions of users, even a small percentage falling for these scams can lead to massive losses — identity theft, stolen money, hijacked accounts, or unauthorised purchases.

The sophistication of attacks means anyone can be fooled, even experienced online shoppers; so vigilance is more important than ever.

Because attackers time these waves around holiday shopping peaks, the window of highest risk is open now — meaning the next 48 hours may be crucial.
My Advice: What You Should Do Right Now

Log in to Amazon directly via the official app or website. Change your password (if it’s weak or reused elsewhere).

Enable 2FA or passkey-based login.

Ignore any email, SMS or call that feels suspicious: don’t click links, don’t provide personal info.

If you are shopping for others (family, gifts), warn them — scammers often exploit excitement around deals and deliveries. 

Report suspicious messages to Amazon — better safe than sorry.