How to Spot Fake Amazon Order Confirmation Emails Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Amazon Order Confirmation Emails Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Fake Amazon order confirmation emails are a common phishing tactic used to target Australian small business owners. These messages often claim that an order has been placed on your business account or that payment details need to be updated. The goal is to trick you into clicking a malicious link, entering your Amazon login credentials, or providing credit card information to cybercriminals.

Quick Fix Steps

1. Do not click any links or download attachments in the suspicious email.
2. Check the sender's email address for misspellings or unusual domains.
3. Log into your Amazon account directly by typing amazon.com.au into your browser.
4. Check your "Your Orders" page to see if the order actually exists.
5. Mark the email as junk or delete it from your inbox.

Detailed Instructions

1. Inspect the Sender Address

Phishing emails often use addresses that look official at first glance but contain subtle errors. Look for addresses ending in @amazon-security.com, @amazon-support.net, or random strings of characters. Legitimate Amazon emails typically come from an address ending in @amazon.com.au or @amazon.com.

2. Look for Generic Greetings

Fake emails often use vague greetings such as "Dear Customer," "Dear Account Holder," or "Hello." Amazon typically addresses you by the name associated with your account.

3. Check for Urgent or Threatening Language

Scammers create a sense of panic to make you act without thinking. Be wary of phrases like:

• "Your account will be suspended within 24 hours."
• "Immediate action required to verify your payment."
• "Unauthorised activity detected on your order."

4. Hover Over Links Before Clicking

Hover your mouse over any button or link in the email (without clicking) to see the actual destination URL. If the link does not lead to an official Amazon domain, do not click it. Instead, open a new browser tab and navigate to amazon.com.au manually.

5. Verify Orders Directly on Amazon

1. Open your web browser and go to amazon.com.au.
2. Click the Sign in button.
3. Enter your credentials and log in.
4. Select Account & Lists from the top navigation.
5. Click Your Orders.
6. Search for the order number mentioned in the email. If no matching order appears, the email is fake.

6. Report and Delete the Email

Once you have confirmed the email is a scam, move it to your junk folder or delete it. If you are using a business email client, you can report the message as phishing to help your email provider filter similar messages in the future.

Warning: If you have already clicked a link and entered your Amazon password, change your password immediately at amazon.com.au. If you use the same password for other accounts, update those as well.

Note: Enable two-factor authentication (2FA) on your Amazon account for an extra layer of security. This prevents attackers from accessing your account even if they obtain your password.

What to Do If You Suspect Fraud

If you believe you have provided payment details to a scammer, contact your bank or card provider immediately to report the transaction. You should also report the phishing attempt to the Australian Cyber Security Centre via their online reporting portal.

If you need assistance securing your business email or identifying suspicious messages, Open a Ticket with our support team.

Still Having Issues?