Amazon has issued an urgent warning to its vast customer base of 300 million users about the rising threat of account takeover attacks. With the holiday shopping season underway, cybercriminals are ramping up their efforts to exploit unsuspecting shoppers.
Understanding Account Takeover Attacks
These attacks primarily involve hackers impersonating reputable brands to gain access to sensitive information. The techniques used are diverse, ranging from fake delivery notifications to social media advertisements promising unbeatable deals.
Recent Cybersecurity Reports
A report from FortiGuard Labs, released on November 25, highlights an alarming increase in holiday-themed malicious domains. Over the past three months, more than 18,000 such domains have been registered, with at least 750 confirmed as harmful. Many of these domains mimic well-known brands, making them particularly deceptive.
FBI Warnings
The Federal Bureau of Investigation has also stepped in, revealing the extent of these impersonation tactics in a service alert dated November 25. Since January 2025, the FBI’s Internet Crime Complaint Center received thousands of complaints regarding account takeovers, leading to losses exceeding $262 million.
Attack Methods
The FBI’s alert outlines common methods employed by attackers, which include:
- Deceptive emails requesting personal information.
- Impersonation of customer service representatives via phone or text.
- Fraudulent transaction alerts leading to phishing websites.
Precautionary Measures from Amazon
To mitigate risks, Amazon has provided its users with critical safety tips:
- Use the official Amazon mobile app or website for customer support and account management.
- Enable two-factor authentication to enhance account security.
- Consider using a passkey for a safer sign-in experience.
- Do not share payment information via phone or email, as Amazon does not request this method.
Conclusion
The warning from Amazon and insights from the FBI underscore the importance of vigilance during the holiday season. As cyber threats continue to evolve, consumers must remain aware and proactively protect their accounts from malicious actors.
