Amazon customers or online users who have received "Amazon You have Purchased an Item Worth" email messages like the one below asking them to confirm their order or purchase is a phishing scam. The fake emails are being sent by cybercriminals to trick potential victims into responding with "Ship my order" to confirm their so-called orders, or "This is not my item" if the so-called items were sent to them by mistake. Once the online criminals receive a response from their potential victims', they will ask their potential victims to visit phishing websites that steal credit card information, online account credentials or personal information. The potential victims may also be asked to visit malicious websites that will infect their computers or mobile devices with viruses, ransomware, spyware or other malware.
Sample of an "Amazon You have Purchased an Item Worth" Phishing Scam
From: Amazon [mailto:newsletter@fundera.com]
Sent: Thursday, March 08, 2018 3:44 PM
Subject: - You have purchased an item worth $560.
Amazon.com
Thank you for your order :
1. Currey & Co 6912 Archer Red Ceramic Table Lamp
Price: $560 $861.54
· we need your confirmation to ship your order, please Click Here and reply with " Ship my order ".
· if you think this was sent to you by mistake, please Click Here and reply with " This is not my item ".
Recipients of the fake or phishing emails are asked to delete and should not follow the instructions in it. Online users who have already being tricked are asked to contact their banks if they tricked into using their credit card on the website that they were taken. They are also asked to change the password for their online accounts.