Amazon.com - Scam, or not?

Moll'll fix it

Just wondering if the following is a scam or has anybody else received emails like I have in the last few days:

Yesterday I received two separate emails from auto-comfirm@amazon.com confirming my purchase of items to be sent to somebody with the same surname as mine, but in Philadelphia. I have checked my credit card balance on line and nothing has been debited for these transactions.

This morning I received an email purporting to be from amazon - account-alert@amazon.com stating "After careful review of your account, we believe it may have been accessed and used by a third-party to attempt to make purchases without your permission. It seems that someone obtained your personal account and/or financial information elsewhere, and used it on Amazon.com to access your account. Please note that no unauthorized charges were completed as we were able to cancel the order(s)."

They go on further to suggest that I reset my password on my amazon account in order to secure it further.

I may have ordered items on Amazon about 10 years ago and used a credit card that is well out of date by now. I can't even remember my password but even if I do, I am reluctant to do as is asked in their email in case it is a scam and I am leaving myself open to my credit card been debited for real.

Has anybody else had these type of emails from Amazon, is it a scam or should I take it seriously?

Khannie

Our credit card was used previously on Amazon to buy stuff and have it delivered to the wrong address. Amazon caught it and informed the credit card company.

edit: That's not to say that you're being scammed. My credit card was used, but it sounds like it was your amazon account. I don't see any harm in resetting your amazon password though, unless you believe there is some chance of spyware being installed on your machine currently.

LKTechGuy

Should be auto-confirm@amazon.com (N not M) so yes, it's a scam.

Does the account alert give you a link to reset your password? If so, it's 200% a scam.

Khannie

LKTechGuy wrote: »

Should be auto-confirm@amazon.com (N not M) so yes, it's a scam.

Good spot.

Moll'll fix it

LKTechGuy wrote: »

Should be auto-confirm@amazon.com (N not M) so yes, it's a scam.

Does the account alert give you a link to reset your password? If so, it's 200% a scam.

Yes, good spot. They don't give me a link but state at the end of the email:
"Feel free to contact us if you have any further questions or concerns by visiting http://www.amazon.com/contact-us ". When I click this link it takes me into a genuine enough looking Amazon Customer Service Page.

Many thanks folks!

Dude111

When i go there i get an INVALID DIRECTORY message! (Page must have gone down -- GOOD)

Spear

LKTechGuy wrote: »

Should be auto-confirm@amazon.com (N not M) so yes, it's a scam.

That would still need a mail account on the Amazon.com domain, and therefore their servers, and they don't give those out to the public. That's not a sign of a scam, it's a sign of a typo by the OP.

We'd need to see the full source and headers to tell anything, since the displayed text of the URL (the anchor) may be very different from the target.

Dude111 wrote:

When i go there i get an INVALID DIRECTORY message! (Page must have gone down -- GOOD)

That page works fine, and is the valid Amazon page.

Dude111

Yes its working now,when i went to it before i got a 404 message!! (I dunno why)


I did think it was legit! (amazon.com)

hmmmmmmmmm

old_aussie

Khannie wrote: »

Our credit card was used previously on Amazon to buy stuff and have it delivered to the wrong address. Amazon caught it and informed the credit card company.

edit: That's not to say that you're being scammed. My credit card was used, but it sounds like it was your amazon account. I don't see any harm in resetting your amazon password though, unless you believe there is some chance of spyware being installed on your machine currently.

Yeah, pump your details into a phishing website link.

Moll'll fix it

Spear wrote: »

That would still need a mail account on the Amazon.com domain, and therefore their servers, and they don't give those out to the public. That's not a sign of a scam, it's a sign of a typo by the OP.

We'd need to see the full source and headers to tell anything, since the displayed text of the URL (the anchor) may be very different from the target.




That page works fine, and is the valid Amazon page.

The page works fine for me too. I didn't type the mail account, actually copied and pasted it from their email to the post. Keeping an eye on my credit card account though, nothing taken out, that's the main thing.

Spear

Moll'll fix it wrote: »

The page works fine for me too. I didn't type the mail account, actually copied and pasted it from their email to the post. Keeping an eye on my credit card account though, nothing taken out, that's the main thing.

Post the source and headers of the mail, that'll remove any doubt.

alb

Looks like someone with the same name as you has a similar email address as you and accidentally used your email address when signing up for amazon, is your email address based on your real name?

Moll'll fix it

alb wrote: »

Looks like someone with the same name as you has a similar email address as you and accidentally used your email address when signing up for amazon, is your email address based on your real name?

Yes it is. Our surnames are the same but first names completely different.