- Popular
- Most Talked-About

Online Threat Alerts

An anti-cybercrime community alerting the public to web threats.

Online Threat Alerts»

Beware of Phishing Amazon Invoices Sent by Cybercriminals

Updated: November 3, 2016 2016-11-03T11:50:47 -
Posted: November 3, 2016 2016-11-03T11:48:32
Views: 2,900
Comments: 3

Amazon customers are asked to be aware of fake invoices like the one below, which are being sent by cybercriminals. The fake invoices falsely claim that the recipients have made an order and they should click on a link in the same email messages to cancel the order or transaction if they didn't make the purchase. But, the link in the email messages goes to a phishing website that will ask visitors to sign-in with their Amazon credentials and submit their personal and credit card information for verification purposes. And, any information submitted on the phishing website will be sent to cybercriminals behind the scam, who will use the stolen information to gain access to their potential victims’ Amazon accounts, and use the accounts fraudulently. They will also use the stolen credit information fraudulently.

Please continue reading below.

A Sample of the Fake and Phishing Amazon Invoice

From: Account BL0950@mobile.apple.com
Sent: 02 November 2016 18:11
Subject: Amazon Invoice No.: 2371663123

Amazon
Order Confirmation
Order # 93289-3215123-45679231877

Hello,

Thanks for your order. We’ll let you know once your item(s) have dispatched. Your estimated delivery date is indicated below. You can view the status of your order or make changes to it by visiting Your Orders Arriving: Friday, November 04

Your delivery option:
One-Day Delivery

Your order will be sent to:
Registered address
United Kingdom

Order Details
Order # 93289-3215123-45679231877
Placed on October 29, 2016

Elifestore Electric Pocket Digital Ph Meter Tester Hydroponics Pen Yellow

Condition: New
Sold by eLifeStore Ltd
Fulfilled by Amazon
£9.99
Item Subtotal: £9.99
Postage & Packing: £7.99
Order Total: £17.98

If you did not purchased this item and want to Cancel the transaction Please click on the link below

Amazon customers who were tricked into visiting the phishing website and submitting their information on it, should change their Amazon passwords immediately, check their accounts for discrepancies, and report any found to Amazon. They should also let their banks know that they were tricked into submitting their credit card information on a phishing website.

To prevent phishing scams, Amazon customers should not click on links in email messages to sign into their accounts. They should always go directly to Amazon’ website (www.amazon.com) and sign into their accounts from there. Once they are signed in, they can check their accounts for purchases and view important notifications.

Note: Some of the names, addresses, email addresses and telephone numbers in email samples on this website may have been impersonated.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

Comments, Questions, Answers, or Reviews

(Total: 3)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews. And, when you post a comment or review, we will use your IP address to display your approximate location to other users.

Please continue reading below.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

Nov 8, 2016 at 1:12 PM by an anonymous user from Overland Park, Kansas, United States
The company I work for has received 2 of these in the last week. One showed a purchase of almost $7,000 and the other of $1,400. The emails had 2 links, either for viewing the invoice, the other to cancel the order. Thankfully the employee that received it came and got me before proceeding. They are using fake amazon-ish websites, one was amazonbilling the other amazonwestva, to help them seem legit, but if you hover over the links, you'll notice that they direct you to my.sharepoint.com, something decidedly un-amazon.
delete
Nov 6, 2016 at 12:19 PM by an anonymous user from Bury St Edmunds, England, United Kingdom
Received this email earlier on today advising that I had ordered exactly what is on the example email above - Elifestore Electric Pocket Digital Ph Meter Tester Hydroponics Pen Yellow.

I did click on the cancel link but I didn't get as far as providing any financial information.
delete
Nov 4, 2016 at 4:51 PM by an anonymous user from Belfast, Northern Ireland, United Kingdom
Just received this email to one of my email addresses where I do not hold an account. Therefore, I know it is fake! Thank you for the update and reassurance though! I did panic a wee bit!

Chels :)
delete

Show More Comments (3)

Show all

Write Your Comment, Question, Answer, or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.