Amazon account hacked

Hellrazer

Hi all ,
Im looking for some help with this one.

3 weeks ago my amazon account was hacked and the email address changed to a .ru one.
I spotted it witin minutes and got on to amazon who deleted all associated credit cards etc on my account.

Turns out my email address was compromised --it was an eircom.net address from years ago.

So I changed the email address on my amazon account to my gmail one which is secured with 2 step verification,turned on 2 step verification on the amazon account and all was good or so I thought.

Roll on 2 weeks ago and I get an email from amazon saying they noticed unusual activity on my account and the reset all the account back to original settings INCLUDING the old eircom address (which was compromised)

Now Ive just spent the last 2 weeks with customer "service" (I use that word lightly) trying to fix this issue. Basically whats happening is that I change the email address on my amazon account to the secure email account ,turn on 2 step verification and all looks good.
A few hours later I get an email every time saying they've reset my account details again--back to the eircom address.

This has happened at least 20 times since the original incident and customer service cant help at all ..I keep getting told that they are escalating it to the fraud team although its me making the changes--it cant be an outside person as 2 step verification means they need the one time code to make changes to the account(by text)

So my question is does anyone know any way of resolving this once and for all?Has anyone got an actual phone number for UK customer service who might be able to fix this.
Im at my wits end here as Ive lost my prime subs,my kindle unlimited,both my echos aren't working and I cant order anything as they keep cancelling orders that I make on the account.

Am I better off writing this account off and starting again with a fresh account??

Any help greatly appreciated.

Agent_47

Hellrazer wrote: »

Hi all ,
Im looking for some help with this one.

3 weeks ago my amazon account was hacked and the email address changed to a .ru one.
I spotted it witin minutes and got on to amazon who deleted all associated credit cards etc on my account.

Turns out my email address was compromised --it was an eircom.net address from years ago.

So I changed the email address on my amazon account to my gmail one which is secured with 2 step verification,turned on 2 step verification on the amazon account and all was good or so I thought.

Roll on 2 weeks ago and I get an email from amazon saying they noticed unusual activity on my account and the reset all the account back to original settings INCLUDING the old eircom address (which was compromised)

Now Ive just spent the last 2 weeks with customer "service" (I use that word lightly) trying to fix this issue. Basically whats happening is that I change the email address on my amazon account to the secure email account ,turn on 2 step verification and all looks good.
A few hours later I get an email every time saying they've reset my account details again--back to the eircom address.

This has happened at least 20 times since the original incident and customer service cant help at all ..I keep getting told that they are escalating it to the fraud team although its me making the changes--it cant be an outside person as 2 step verification means they need the one time code to make changes to the account(by text)

So my question is does anyone know any way of resolving this once and for all?Has anyone got an actual phone number for UK customer service who might be able to fix this.
Im at my wits end here as Ive lost my prime subs,my kindle unlimited,both my echos aren't working and I cant order anything as they keep cancelling orders that I make on the account.

Am I better off writing this account off and starting again with a fresh account??

Any help greatly appreciated.

Close the account, get a new email address and open a new account.

Agent_47

I have done this BTW

Hellrazer

What if my payment methods / address etc were flagged?Would they not remove the new address?

is_that_so

Hellrazer wrote: »

What if my payment methods / address etc were flagged?Would they not remove the new address?

Everything in a record is linked to a unique email address. Once that goes so does all the data. Don't worry about it, get a really strong password and use two step verification.

Hellrazer

Thanks.
What about my prime subs etc--theyre all paid for up till end of October--I take it I can just write them off?

is_that_so

Hellrazer wrote: »

Thanks.
What about my prime subs etc--theyre all paid for up till end of October--I take it I can just write them off?

Can't you cancel it and get a refund? You could ask them but if not, at such a fairly low cost I'd write it off.

Sleeper12

If the issue is that they keep reverting to the compromised email address then would it not be simpler to close this email account & totally delete it. If the email address is no more then Amazon can't revert back to it

Cabaal

Sleeper12 wrote: »

If the issue is that they keep reverting to the compromised email address then would it not be simpler to close this email account & totally delete it. If the email address is no more then Amazon can't revert back to it

Yes they can,
Amazon will undo any unauthorised changes from before the account was compromised.

This means that if the email addy was @eircom.net Amazon will revert the a/c back to this eircom address.

The best thing for OP to do is get access to eircom.net account, reset password on Amazon account and then change the email address associated with the Amazon account to something else.

Amazon have no way of knowing that the eircom.net account isn't being used anymore by the OP.

Hellrazer

So I managed to get my account sorted. It turns out the hacker who originally hacked my eircom account with the .ru email address contacted Amazon by phone with all my personal details and asked them to change the email address to a new eircom one that they had setup that was one letter out by my original one the sneaky little bastard.

He wasn't able to answer their security questions that Amazon asked him so they put my account on hold which was why everytime I changed something they changed it back.

So Cabaal was right--they kept reverting it to the original email address ie the eircom one everytime a change was made even though it was me that was making the changes. The sneaky little hacking ****er thought he was smart by using an almost identical email address to my eircom one to trick amazon into giving him access to my account.

They blacklisted my account and put it on hold until they were able to verify the correct owner of the account.

I spent an hour on the phone with them yesterday and was able to prove who I was ,turning on the 2 step verification again while I was on the phone and got my account back.

I also recovered my eircom account and set a new super strong password in order to stop access that way.

STB.

@Hellraiser. 350k eircom accounts where exposed to a hack some 5/6 years ago. Dumps are still out there.

Check HaveIBeenPwnedand it will show the extent.

You might want to change the password on eircom.net email and disassociate everything you have used it for.

It goes without do not use the same password for other accounts.