What’s going on
KnowBe4’s Threat Lab reported on Oct. 6 that Amazon impersonation emails rose a reported 188% from late August into September, ahead of Prime Big Deal Days. In the U.S., it said most of them used a billing or renewal problem as the hook. The button in these emails leads to a lookalike sign-in page that keeps whatever password and card details are typed. KnowBe4 says these campaigns peak in the weeks before major shopping events, and Black Friday is next.
If you already clicked
- Change your Amazon password in the Amazon app, and on any other account that uses the same one. Then turn on two-step verification.
- If you typed card details, call the number on the back of your card right away.
Report it
Forward the email to reportphishing@apwg.org, then report it to the FTC at ReportFraud.ftc.gov.
Sources
- KnowBe4 Threat Lab, Oct 6, 2026
- Federal Trade Commission, “How To Recognize and Avoid Phishing Scams”
- Federal Trade Commission, “What To Do if You Were Scammed”
