Anyone else getting spoof emails about changing your log in details for your Amazon account?

 

I'm getting around 3 per day now, getting annoying and I've informed Amazon and passed them to their (suppose security dept) but it seems it's not much good.

 

How to stop them?

No, but thanks for the heads-up.

 

I take it there's nothing obvious about the sender details that would let you black list them along the lines of sender:- Fred@Nigerian_Scammers.com

I am with BT email and I can block nuisance sender's addresses. I have had spam emails about Amazon fake orders

Edited 12 April, 20197 yr by edbostan

2 hours ago, KenONeill said:

No, but thanks for the heads-up.

 

I take it there's nothing obvious about the sender details that would let you black list them along the lines of sender:- Fred@Nigerian_Scammers.com

 

No they seem genuine, no oddities in the emails.

We've never had any problems with Amazon, logging in, buying or receiving orders etc, perfect really so I don't want to block emails from them.

 

The emails come in the form of you've changed your password now log in to complete the process etc or they send you a log in pass code (numbers) to use, all obviously a scam of some sort.

 

I've passed on the spoof emails but as Amazon have a fraud dept for scam emails but it's an automated reply each time, these large companies are sort of uncontactable (humans) for this type of thing 

Edited 12 April, 20197 yr by MickA

5 minutes ago, MickA said:

 

No they seem genuine, no oddities in the emails.

We've never had any problems with Amazon, logging in, buying or receiving orders etc, perfect really so I don't want to block emails from them.

 

The emails come in the form of you've changed your password now log in to complete the process etc or they send you a log in pass code (numbers) to use, all obviously a scam of some sort.

 

I've passed on the spoof emails but as Amazon have a fraud dept for scam emails but it's an automated reply each time, these large companies are sort of uncontactable (humans) for this type of thing 

Can you extract and post (disabled; a spacebar in the address will do it) the sender field? It's probably better to disconnect your internet first, then copy the field into notepad, disable the field content, reconnect the internet and then post it to here.

depending on your mail server (I use Yahoo& BT) there's an option in the headers to see the raw message, where it lists the ISP address of the sender. Check that on whois and it's easy to see who is/is not genuine.

To the two posts above, I can't seem to get the senders details using Outlook as described. I've instead right clicked the email clicked properties then details then clicked message  source.

 

The info I've gleened seem to base the senders from the Netherlands although if I search on the Who's ip site Amazon are based in Seattle USA.

 

The pukka Amazon emails are amazon.co.uk these spoof ones are amazon.in I think I've found the IP addresses too one being  212.54.59.73 the other 212.54.57.75

 

And just as I checked I've had another spoof email from them, that's 3 again today.

This is what I'm getting below, another two today.       Your login OTP is: 424841 This OTP is confidential. For security reasons, DO NOT share the OTP with anyone. Amazon takes your account security very seriously. Amazon will never email you and ask you to disclose or verify your Amazon password, credit card, or banking account number. If you receive a suspicious email with a link to update your account information, do not click on the link—instead, report the email to Amazon for investigation. We hope to see you again soon.

I always ignore any email I have not instigated, from any site that deals with money! If I want to or need to update anything, I go straight to the site and would never use or recommend using a link from anyone. Far too easy to fake and con you. Usually, after a while, you get any money etc back but its such a pain. Again, usually, fakers move on to pastures new so the automated non-profit ones stop. This may take several months. keep ignoring them and only log on and use your account, direct!

Mick- try this site --https://www.whois.com/whois/212.54.59.73

You may need to enter the site address ( 212.54.59.73 or 212.54.57.75 ) in the box at the head of the form.

Info I get back agrees that site is in Netherlands. I'd check Amazon phising site for how to ask for help.

Edited 14 April, 20197 yr by VWD

^^^ I've done that but just get an automated answer.

Still it's not a problem I never follow any instructions from emails unless as said I've instigated them.

I've managed to get them to direct to junk mail now.

 

There are probably about a billion Amazon phishing emails sent every day.

 

Who is you current email provider? If it's one of the big ones then they will be protecting against email spoofing (for the technical - DMARC, DKIM and SPF). so that should mean the dodgy email must be coming from a non-Amazon domain.

Best to look carefully at the sender address.