Amazon warns 200 million Prime customers that scammers are after their login info

🛑 What’s Happening?

Amazon has issued a critical alert to over 200 million Prime customers, warning them about a new phishing scam aimed at stealing login credentials and personal data. The phishing campaign coincides with Prime Day, using fake email notices to trick users into giving away their Amazon login details.

🎯 How the Scam Works

• Emails mimic Amazon’s official design and branding.
• They falsely claim that your Prime membership is about to renew at a higher price.
• A link labeled “Cancel Subscription” redirects to a fake Amazon login page.
• This page collects your Amazon email, password, and sometimes payment details or ID info.

⚠️ Why It’s Dangerous

This phishing scam poses multiple risks:

• Account Takeover: Attackers can make purchases or lock you out of your own account.
• Credential Stuffing: If you reuse passwords, attackers may access other services you use.
• Financial Fraud: Stolen payment data can be used for unauthorized charges or sold on dark web markets.

🛡️ What You Should Do

1. Do NOT click suspicious links in emails, even if they look legitimate.
2. Access Amazon only through the official app or by typing www.amazon.com directly into your browser.
3. Check messages in the Amazon Message Center for official notices.
4. Enable 2-step verification on your Amazon account.
5. Use strong, unique passwords not used on other platforms.
6. Install reputable web protection tools like Malwarebytes Browser Guard to block fake sites.
7. If you’ve already clicked the link, reset your password immediately and monitor your account for suspicious activity.

🔐 Legal & Compliance Angle

From a legal standpoint, phishing scams of this scale raise issues regarding:

• Consumer privacy violations.
• Data breach notification laws under GDPR, CCPA, and related frameworks.
• Liability for unauthorized charges stemming from insufficient account protections.

Amazon’s swift response and recommendation of 2FA demonstrate a proactive compliance approach—something all major platforms must adopt.

🧠 SEO Summary

This blog covers the ongoing Amazon Prime phishing scam where scammers are attempting to steal login credentials and personal data using fake email alerts. Topics include phishing prevention, cybersecurity best practices, and platform security during peak events like Prime Day.

📚 Want to Read More?

To dive deeper into this topic and get detailed analysis directly from the source, we recommend reading the full article by Malwarebytes:

👉 Read the original Malwarebytes blog post

Stay protected using the best Malwarebyte fighter. Click here for more information