Fraudsters are targeting Amazon customers with emails telling them to check their account details

Customers of the online bookseller Amazon are being warned to be wary of a fake “phishing” email asking them to check their accounts.

These emails, addressed “Dear Customer”, say: “Your order has been successfully canceled [sic]. For your reference, here’s a summary of your order.” They then give an order number and a link to “order information”, which appears to take users to an external website that does not belong to Amazon. The emails have a link to the genuine Amazon.com website at the bottom, making them appear authentic.

“From time to time, customers may receive emails appearing to come from Amazon, which are actually false emails, or ‘phishing emails’,” said a spokeswoman for Amazon. “These can look similar to real Amazon emails but often direct the recipient to a false website, where they might be asked to provide account information such as their email address and password combination.”

She advises customers to send any such emails to spoofing@amazon.com and only check their order status by logging directly into their account from amazon.co.uk.

This particular spoof is one of a growing number of fake emails landing in people’s inboxes, as the global wave of phishing attacks grows. Phishing is the criminally fraudulent process of trying to illicit sensitive information such as usernames, passwords and credit card details from website users, usually via emails that look as though they genuinely come from a bank or an online retailer.

Last week the industry body UK Cards Association announced that the number of phishing attacks on bank customers had risen to 51,000 from just 1,700 five years ago. As a result of this and other methods of internet banking fraud, online banking losses totalled almost £60m in 2009 compared with £52.5m in 2008 and £23.2m in 2005. It is the only area of card fraud that has increased rather than fallen in the past year.

“Banks would never approach customers by email asking for their bank details, but people still fall for this scam,” says a spokesman for the association.

Phishing attacks have also plagued users of social networking website Twitter in the past few months. Criminals have been attempting to trick Twitter users into giving away their username and password via messages that apparently come from friends. The messages contain a link to a spoof website that looks just like the Twitter home page, where users are then prompted to enter their login details. Security experts have expressed concern that this information could then be used to gain remote access to Twitter users’ computers.

Last week the website introduced an anti-phishing service designed to protect its users from these types of attacks.

UK banking customers can see examples of recent phishing emails in a gallery, sorted by bank, on the industry’s Bank Safe Online website.

Protect yourself

• Make sure your computer has up-to-date anti-virus software and a firewall installed. Consider using anti-spyware software.

• Ensure your browser is set to the highest level of security notification and monitoring.

• Apply common sense. Your bank would never contact you to ask you to disclose your Pin or other sensitive details by email. Delete such emails and make your bank aware of what you have been sent.

• Always access online accounts by typing the bank or retailer’s address into your web browser. Never go to a website from a link in an email and then enter personal details.


guardian.co.uk © Guardian News & Media Limited 2010 | Use of this content is subject to our Terms & Conditions | More Feeds

Related articles

  • Online banking fraud loses rise 14%
    Number of 'phishing' attacks have risen to 51,000 from just 1,700 five years ago, according to the UK Cards AssociationThe amount of money lost to online banking fraud last year rose by 14%, according to figures released today, despite an overall drop in card fraud losses.Criminals have switched their attentions from internal bank systems, which are notoriously difficult to attack, to individual h...
  • World Cup fraudsters to be targeted by new cyber-enforcement team
    Online ticket sales to South African tournament will be policed in crackdown on internet scamsWebsites selling fake tickets for this summer's World Cup finals in South Africa are to become part of the focus of a new cyber-enforcement team set up by the government to crack down on internet and email scams.Similar scams, including those online, currently cost three million UK consumers £3.5bn a year...
  • Waitrose launches UK brand expansion and plans more foreign outlets
    Managing director Mark Price aims to keep fast-growing upmarket grocer ahead of rival M&SWaitrose boss Mark Price is drawing up plans to transform the upmarket food chain into a consumer brand available in thousands of non-Waitrose shops in the UK and overseas. He believes the Waitrose label has the potential to be a big "fmcg" – fast moving consumer goods – name like Heinz or Kellogg's, which...
  • Can Katy Perry stop EMI going to America for a song?
    Billions of pounds of debt, the internet and piracy are crippling one of Britain's most iconic firmsIt is a tale of sex, debt and rock'n'roll that is unlikely to have a happy ending. When Guy Hands, a City financier with a penchant for fast food and an insatiable appetite for deal-making, came up with a plan to buy EMI, Britain's flagship music company, using billions of pounds of borrowed money, ...
  • When the dotcom bubble burst the ideas didn’t just float away
    The internet boom and bust saw companies come and go, but the seeds of great website businesses were sown, and many of the entrepreneurs are still workingThe streets of Silicon Valley are littered with survivors of the dotcom boom and bust – but while many retain vivid memories of the crash, few seem permanently scarred by the experience.Among the most notorious failures was pets.com, an online pe...
  • Fraudster who conned supermarkets with free range scam jailed
    Sainsbury's and Tesco among stores caught out by wholesaler who passed off battery produce as organicFor those who made the conscious decision to spend more on free range or organic eggs, it was worth paying a premium to know the hens that laid them had been kept in ethical conditions.But those people who ended up paying over the odds for Keith Owen's eggs may feel a little less warm inside after ...
  • Egg boss jailed for ‘free range’ fraud
    • Supermarket customers duped in two-year, £3m scam • Lawyer claims client is far from industry's only bad eggA Midlands businessman was jailed for three years today after admitting making a fortune by fraudulently passing off battery farm eggs as free range or organic.Around 100m mislabelled eggs sold by Keith Owen ended up on the shelves of supermarkets including Sainsbury's and Tesco. That the ...