Amazon Prime phishing uses fake billing alert

A convincing Amazon Prime phishing campaign is stealing logins and full payment card details, Hackread reports.

How it works

• The email's subject is "Your Prime Membership On Hold". It says a payment failed and Prime Video is suspended.
• It gives 48 hours to update payment details or face "permanent cancellation".
• A "Resume My Membership" button leads to a multi-page site copying Amazon's branding.
• The site collects your Amazon login, personal details and complete card information, step by step, like a real account recovery process.

Hackread received the email on September 29 and walked through the site with dummy details.

Warning signs

• The sender address is not from amazon.com.
• Short deadlines and threats of cancellation.
• Any link asking you to re-enter full card details.

What to do

• Check your Prime status in the Amazon app or by typing amazon.com yourself.
• Forward phishing emails to reportphishing@amazon.com.
• If you entered your card, call your bank right away.

Sources

• Hackread