Impersonating retailers like Amazon is a favorite tactic of scammers, whether through fake websites, ads, or phishing emails. As Amazon Prime Day approaches this week (July 11 – 12), we’ve noticed a significant uptick in Amazon scams during our research. Read on for the low-down. 

Amazon Prime Day Scams 

This year, Prime Day will run over two consecutive days. No doubt readers are excited to catch some great deals – but you’d be wise to watch out for scammers seeking cash in on Prime Day too.  

Above are two fake Amazon Prime Day websites. The aim of these fake websites is to steal your sensitive credentials, with which scammers can commit cybercrime such as identity theft and/or monetary theft. The top states affected by these fake websites are as follows: 

1. Washington – 15% 
2. Ohio – 9% 
3. Minnesota – 9% 
4. Virginia – 6% 
5. Missouri – 6%  

Our researchers have detected over 100 malicious URLs purporting to be Amazon Prime Day websites, since late June. Readers should also be on the lookout for phishing attempts via SMS text messages, such as the following: 

“Prime packages could be waiting for those who sign up. Want to try one? [Malicious URL] (SNT – text STOP to unsub)” 

Block Spam and Scam Texts for FREE 

For an easy way to avoid clicking on malicious links inside text messages, you’ll want to check out Trend Micro Check — our 100% FREE mobile app that blocks scam and spam texts from entering your inbox. 
 
Not only can it block unwanted texts, but Trend Micro Check can also keep you safe from malicious links on all your messaging apps (WhatsApp, Telegram, Tinder, etc.) and shield you from dangerous sites as you browse the web. Download today for free (available for Android and iOS). 

Further Amazon Phishing Cases 

Pictured above are some of the many fake Amazon websites we have come across recently. In these cases, the three worst affected states are Texas, California, and Florida. Phishing SMS messages to be on the lookout for include the following two templates:  

“Account Risk Alert (1Amazon) Login > View: ([URL] Please process promptly.” 

“Amazon_SMS Warning: Your annual account fee is currently past due. Pay now: [URL] or you will be fine. Ref code: 952797” 

Note the poor grammar and chaotic layout. Never reply to these texts. If in doubt, be sure to visit the authentic website, which is best done via a Google search.  

Fake Amazon Websites – Amazonexal & Lainedmn

Amazonexal[.]com purports to be an offshoot of Amazon, and sells a range of goods at great discount prices. Unfortunately, it’s a SCAM, and another example of scammers impersonating Amazon to create a fake website. Ask yourself: why on earth would Amazon sacrifice their internationally recognized name and URL to create another website?  

Similarly, the above website, “Lainedmn”, also impersonates Amazon in an effort to lend an air of authenticity. Stay away from these sites: you won’t receive anything, but will compromise your security. Take note of the following red flags: 

• Both sites use the Amazon logo and content from amazon.com, without any affiliation. 
• Both sites were recently created. 
• There is no background info provided by these sites. The owners are hiding their identity on WHOIS. 
• Both sites offer ridiculous discounts, communicated via hyperbolic language and images. 
• Neither site has any social media presence – other than victims complaining online. 
• Neither site contains reviews and testimonials.  

Protecting Your Identity and Personal Info 

Compromised personal data can have serious consequences, including identity theft, financial fraud, and job losses. The best thing you can do is a) have reliable cybersecurity protection, and b) ensure you will find out ASAP in the event of being affected. We would encourage readers to head over to our new FREE ID Protection platform, which has been designed to meet these challenges.  

With ID Protection, you can: 

1. Check to see if your data (email, number, password, credit card) has been exposed in a leak, or is up for grabs on the dark web; 
2. Secure your social media accounts with our Social Media Account Monitoring tool, with which you’ll receive a personalized report; 
3. Receive the strongest tough-to-hack password suggestions from our advanced AI (they’ll be safely stored in your Vault); 
4. Enjoy a safer browsing experience, as Trend Micro checks websites and prevents trackers. 

All this for free — why not give it a go today? As always, we hope this article has been an interesting and/or useful read. If so, please do SHARE it with family and friends to help keep the online community secure and informed — and consider leaving a like or comment below. Here’s to a secure 2023!