TLDR
Amazon is the most impersonated brand in text message scams, with fake order confirmation and account alert texts designed to steal your login credentials and payment information. ScamVerify™ sees four main variants: fake shipment notifications, unauthorized purchase alerts, account lockout warnings, and Prime renewal scams. The FTC reported that Amazon impersonation scams caused over $27 million in consumer losses in 2023 alone. Real Amazon notifications come through the Amazon app or email, never through unsolicited text messages demanding immediate action.
Why Amazon Is the Top Impersonation Target
Amazon processes over 1.6 billion packages per year in the U.S. alone. With 167 million Prime members in the U.S., the odds are high that any random text recipient has an Amazon account and has recently placed an order. This makes Amazon impersonation texts uniquely effective because the claim ("your order has shipped" or "suspicious purchase detected") is almost always plausible.
The FTC's impersonation scam data shows Amazon consistently ranks as the #1 impersonated company:
| Impersonated Brand | Reported Losses (2023) | Report Volume |
|---|---|---|
| Amazon | $27 million+ | 44,000+ reports |
| Apple | $16 million+ | 22,000+ reports |
| Microsoft | $14 million+ | 18,000+ reports |
| PayPal | $12 million+ | 15,000+ reports |
| Netflix | $8 million+ | 11,000+ reports |
The Four Main Scam Variants
1. Fake Shipment Notification
"Amazon: Your order #112-4738291-6653847 has shipped! Track your package: [fake-link]"
"Amazon Delivery Update: Your package is out for delivery today. Confirm delivery address: [fake-link]"
This variant exploits the fact that active Amazon shoppers receive legitimate shipment texts regularly. The fake order number looks realistic, and the tracking link leads to a phishing page that mimics Amazon's login screen. These are closely related to package delivery scam texts from carriers like USPS, UPS, and FedEx.
2. Unauthorized Purchase Alert
"Amazon Security: A purchase of $849.99 (MacBook Air) was made on your account. If this wasn't you, cancel here: [fake-link]"
"Amazon Alert: Your account was charged $1,247.00 for an iPhone 16 Pro. Dispute this order immediately: [fake-link]"
This is the most effective variant because it triggers panic. The high dollar amount ($500-$2,000) creates urgency to "cancel" the order. The link leads to a fake Amazon login page that captures your email, password, and often requests credit card "verification."
3. Account Lockout Warning
"Amazon: Your account has been temporarily locked due to suspicious activity. Verify your identity to restore access: [fake-link]"
"Amazon Account Alert: We detected a login from an unrecognized device. Secure your account now: [fake-link]"
This variant preys on fear of losing access to your account, order history, and saved payment methods. The phishing page typically asks for your full login credentials plus security questions.
4. Prime Renewal Scam
"Amazon Prime: Your membership renewal of $14.99/mo failed. Update your payment method to avoid service interruption: [fake-link]"
"Amazon Prime is expiring in 24 hours. Renew now at a special rate of $79/year: [fake-link]"
This targets the 167 million U.S. Prime members specifically. The urgency of losing Prime benefits (free shipping, Prime Video, Prime Music) motivates quick action.
Real vs. Fake Amazon Notifications
Knowing how Amazon actually communicates is the fastest way to spot fakes:
| Feature | Real Amazon | Fake Scam Text |
|---|---|---|
| Channel | Amazon app, email, amazon.com | Random text message |
| Order verification | amazon.com/your-orders | External link to unknown domain |
| Payment issues | Notification inside your Amazon account | Text demanding immediate payment update |
| Account security | Email from amazon.com with in-app verification | Text with external "verify" link |
| Sender | Amazon app notification or @amazon.com email | Random phone number or short code |
| Tone | Informational, no urgency | "Immediately," "within 24 hours," "account locked" |
| Links | Links to amazon.com subdomains only | Links to amazon-security-verify.com or similar fakes |
The Red Flag Checklist
Check these five things before clicking any Amazon-related text:
- Did it come via text message? Amazon sends order updates through the Amazon app and email. Unsolicited security alerts via text are almost always fake.
- Does it demand immediate action? Real Amazon notifications inform you. They do not threaten account closure within hours.
- Does the link go to amazon.com? Long-press the link (do not tap). Legitimate links go to amazon.com. Scam links use domains like amazon-account-verify.com or amzn-security.net.
- Does it reference a specific order you placed? Check your actual orders at amazon.com/your-orders. If the text mentions an order you never placed, it is a scam.
- Does it ask for your password or payment info via text? Amazon never asks for passwords, credit card numbers, or Social Security numbers through text messages.
How to Verify Directly With Amazon
If you receive a suspicious text about your Amazon account:
- Open the Amazon app or go to amazon.com directly (do not click the text link)
- Check Your Orders at amazon.com/your-orders for recent activity
- Check Your Account for any security notifications
- Use Amazon's Message Center (amazon.com/gp/message) to see all legitimate communications
- Report the scam text to Amazon at stop-spoofing@amazon.com
Similar scam patterns target bank account holders with fake transaction alerts. Learning how to spot scam text messages across all brands will sharpen your detection skills.
What to Do If You Clicked the Link
- Change your Amazon password immediately at amazon.com (not through any link in the text)
- Enable two-factor authentication on your Amazon account
- Check your order history for unauthorized purchases
- Review your saved payment methods and remove any you do not recognize
- Contact your bank if you entered credit card information on the phishing page
- Report the text to Amazon at stop-spoofing@amazon.com
- Forward the text to 7726 (SPAM)
- Analyze suspicious texts at ScamVerify text checker
FAQ
Does Amazon ever send legitimate text messages?
Yes, but only if you opted into Amazon delivery notifications. These texts provide tracking updates for orders you actually placed. Amazon does not send security alerts, password reset requests, or payment failure notifications via text message. All account-related communications go through email or the Amazon app's Message Center.
How can I tell if an Amazon email is real?
Legitimate Amazon emails come from addresses ending in @amazon.com. You can verify any email by checking Amazon's Message Center at amazon.com/gp/message, which stores all official communications. If an email is not in your Message Center, it is not from Amazon.
What information do scammers get if I click the link?
If you entered your Amazon login credentials on a phishing page, scammers now have your email and password. They can access your account, place orders using your saved payment methods, and change your account details. If you entered credit card or bank information, that data can be used for fraud or sold on dark web marketplaces.
Why do Amazon scam texts use realistic order numbers?
Amazon order numbers follow a specific format (###-#######-#######). Scammers generate random numbers in this format to make texts appear legitimate. The order number in a scam text does not correspond to any real order. You can always verify by checking amazon.com/your-orders.
How do I stop getting Amazon scam texts?
You cannot fully prevent scam texts, but you can reduce them. Register your number with the Do Not Call Registry at donotcall.gov. Enable your carrier's spam filter (T-Mobile Scam Shield, AT&T ActiveArmor, Verizon Call Filter). Report every scam text by forwarding it to 7726 (SPAM). Block the sender's number after reporting.
