Amazon Prime scam is back!
Huge phishing campaign is targeting Amazon Prime users via email and phone, resulting in victims giving remote access to their devices.
The attack starts with automated phone calls to victims which proclaim that the victim opened an Amazon Prime account. If they don’t want that transaction to happen and want to cancel it they should press one. This connects the victim to a fraudulent customer support representative.
Then the victim is informed that opening the account was possible due to some security problem on victim’s computer. To fix that problem fraudster asks to be given remote access to the device. This allows fraudsters to steal login credentials and personal information that can be used in future scams.
There is also an email version of this scam where victims receive a message about starting Amazon Music subscription that costs around 30 pounds. There’s also a link to cancel the subscription that takes victims to a website where they are to put payment card details. Instead of cancelling this scam subscription they are charged by the fraudsters.
What to do?
- never give anyone remote access to your device – Amazon will never ask for that. They also don’t ask for payments, card details, login credentials via phone or email.
- if you want to check if there’s a charge on your account log directly into the website, don’t use sent links. You can also contact support by yourself, don’t trust people who call you and ask for sensitive information without checking them first.
- mark emails like that as SPAM so your mail will know in the future that it’s suspicious.