Amazon Code Text Scam - How to Protect Yourself

There are two primary variations of this scam currently circulating:

1. The Direct Code Scam (Phishing Links)

• How it works: You receive a text message containing a verification code you did not request. The message usually includes a malicious hyperlink, falsely claiming you must "click here to deny the request" or cancel an order you never made.
• The reality: Real Amazon verification texts never contain clickable links to cancel or deny a code—they only provide the numbers. Clicking the link will take you to a fake login page designed to steal your password.

2. The Multi-Step "Two-Factor" Scam (Phone Call + Text)

• How it works: You receive a legitimate Amazon security code text message out of nowhere. Moments later, your phone rings. The caller pretends to be an "Amazon Security Agent" warning you about fraudulent charges or suspicious activity on your account. They ask you to read the text code back to them to "verify your identity" or "cancel the charge."
• The reality: The text code you received is actually real. While calling you, the scammer is actively sitting on the real Amazon login page trying to hack your account. They triggered the code by clicking "Forgot Password" or trying to log in using your phone number. If you read the code aloud to them, they will use it to lock you out, steal your saved credit card information, and buy expensive items.

  McAfee

How to Tell If an Amazon Text Is Fake

What You Should Do Right Now

• Ignore and Delete: If you just got the text out of the blue, simply delete it. As long as you don't share the code or click the link, your account remains secure.
• Hang Up: If someone calls you claiming to be from Amazon, hang up immediately. Amazon will never call you to demand a verification code.
• Check Your Account Manually: If you are worried an unauthorized order was actually placed, log directly into the official Amazon App or website and look at Your Orders to verify.
• Secure Your Login: If you feel your password might have leaked in a past data breach, log into Amazon securely, change your password, and ensure your own Two-Factor Authentication is active.
• Report It: You can forward suspicious text messages to Amazon by reporting it directly through the official Amazon Report a Scam page.