As Amazon Prime Day approaches on July 16 and 17, shoppers need to be vigilant against increasing fraud attempts. Fraudsters are capitalizing on the event by setting up fake Amazon lookalike websites and sending phishing emails that promise enticing offers.
These websites mimic Amazon’s interface and lure unsuspecting users into entering their login credentials, which are then stolen to either make unauthorized purchases or sell personal data. In June 2024 alone, over a thousand new Amazon-related domains were created, with a significant portion classified as malicious or suspicious by cybersecurity experts.
These fraudulent sites often use official-sounding domain names that resemble Amazon’s legitimate addresses, such as “amazon-onboarding” or “shopamazon,” to deceive users. Some even incorporate country identifiers to mimic regional Amazon stores, despite being .com domains. To protect oneself, it’s crucial to scrutinize all emails claiming to be from Amazon or its affiliates.
Legitimate emails will never ask for login details or contain spelling errors. Users should avoid clicking on links in emails and instead, manually type the website’s URL into their browser or ensure links lead to HTTPS-encrypted Amazon sites.
When browsing, always verify that the website URL starts with “HTTPS,” indicating a secure connection, and be wary of deals that seem too good to be true. This caution extends to avoiding phishing attempts like the Amazon triangle scam, where scammers exploit the allure of steep discounts to deceive shoppers.
By remaining vigilant and following these precautions, shoppers can safeguard themselves against falling victim to fraud during Amazon Prime Day and beyond.