Email from Amazon regarding Password reset - Anyone?

[kashif]

Did anyone of you guys received any email from Amazon that your account maybe phished and thus we have changed your password. I have received emails on both of my UK and US accounts. Just wondering that is it only me or anyone else too?

Thanks.

[RBBrittain]

Originally Posted by kashif

Did anyone of you guys received any email from Amazon that your account maybe phished and thus we have changed your password. I have received emails on both of my UK and US accounts. Just wondering that is it only me or anyone else too?

Thanks.

Not here; might be a phishing scam. If you have webmail, float your mouse pointer over the link; if the info bar at bottom shows it does *NOT* go to an Amazon site (even if the text says it does), DON'T CLICK IT!

Even a legitimate Amazon email would *NOT* have separate notices for U.S. & UK accounts; except for local tweaks, there's only one account for all Amazon-branded sites except Japan. Only a single password change would be needed for their U.S., UK, French, German (including Austria), Italian, Spanish, Canadian & Chinese websites.

[DetroitSportsFan]

Sounds like a phishing scam.

[michaeljoo]

Originally Posted by DetroitSportsFan

Sounds like a phishing scam.

Yep, sound like a phish to me too.

[kashif]

I am very careful while opening https pages. I checked my password on Amazon site after this email and found that my old password was not working so then I reset my password from their page and my new pass is working now so I am just curious that why they changed my password?

This was the email I got:

Hello XXXXXXXXXX (I omitted my name here),

This is an important message from Amazon.co.uk

As a precaution, we've reset your Amazon.co.uk password because you may have been subject to a "phishing" scam.

Here's how phishing works:

A scam artist sends an e-mail, which is designed to look like it came from a reputable company such as a bank, financial institution, or retailer like Amazon.co.uk, but is in fact a forgery. These e-mails direct you to a website that looks remarkably similar to the reputable company's website, where you are asked to provide account information such as your e-mail address and password. Since that website is actually controlled by the phisher, they get the information you entered.

Go to amazon.co.uk/phish to read more about ways to protect yourself from phishing.

To regain access to your Amazon customer account:

1. Go to Amazon.co.uk and click the "Your Account" link at the top of our website.

2. Under Account Settings, click the link that says "Forgotten your password?"

3. Follow the instructions to set a new password for your account.

Please choose a new password and do not use the same password you used with us previously. If you have used the same password for your email account as on your Amazon.co.uk account, you should also change your email account password to prevent phishers from reading and/or stealing your emails.s.

I hope this helps.

We look forward to seeing you again soon at Amazon.co.uk


Sincerely,

Amazon.co.uk


Please note: this e-mail was sent from an address that cannot accept incoming e-mail. To contact us about an unrelated issue, please visit the Help section of our website.

[shireguy]

let me use an older thread rather than a new one...

I've recently - December 2017 - been getting a STACK of these emails


Password assistance

To verify your identity, please use the following code:

836072 (don't worry - this is no longer valid)

Amazon takes your account security very seriously. Amazon will never email you and ask you to disclose or verify your Amazon password, credit card, or banking account number. If you receive a suspicious email with a link to update your account information, do not click on the link—instead, report the email to Amazon for investigation.

We hope to see you again soon.

then followed by ....

Thanks for visiting Amazon.com! Per your request, we have successfully changed your password.

Visit Your Account at Amazon.com to view your orders, make changes to any order that hasn't yet entered the shipping process, update your subscriptions, and much more.

Should you need to contact us for any reason, please know that we can give out order information only to the name and e-mail address associated with your account. Thanks again for shopping with us

THIS WAS NOT ON MY ACTION.


Contacting Amazon is pointless. They do not have any direct contact for security issues, and don't take this seriously.

basically if you do anything.... they will respond with a generic email

Hello,

Thank you for telling us about the unauthorized activity in your account. To protect your information, the credit card details in your account cannot be accessed via our website. We also do not display full credit card numbers in your account.

We have taken these steps to restore your account:
-- Disabled the password to your account.
-- Reversed any changes made by this party.
-- Canceled any pending orders.

Please allow 5 hours for these actions to take effect.

After 5 hours, you will be able to reset your password and regain access to your account. On the Sign In page, select "Forgot password?" and follow the instructions. After you enter your email or mobile phone number, you will receive an email or SMS message containing a personalized link. Click the link and enter your new password.

If you have any trouble resetting your password, call Customer Service at:

Customers in the U.S. or Canada: 1-866-216-1072
International customers: 1-206-266-2992

You will also need to:
-- Re-enter your complete payment method information the next time that you place an order.
-- Re-enter any addresses that you recently added to your account.
-- Check your subscriptions, if you have any. You may need to update them.

We do not know how this person got your sign-in information because that happened away from our websites. Some techniques include using malicious software to capture a user's keystrokes, trying common passwords, and sending fraudulent emails that request account information (known as "phishing").

To learn more about safe online shopping, visit the "Security & Privacy" section of our Help pages.

Sincerely,

Account Specialist
Amazon.com
http://www.amazon.com

This has happened 5 times in the past few weeks.... my password was being changed.

anyway - Amazon wont do much about it...... thought that I would advise others about this.

[TheLaughingMann]

I would say if you can access your account by going right to Amazon.com, then change the password immediately. Use something new and original that isn't similar to a prior password...beyond that, no clue.

[zman73]

These phishing scams are meant to freak you out to where you click the link right away, like with ones I get that state my email is going to be closed. Most can be spotted as fakes even before inspecting the entire email, graphics might be off, etc...

[shinobipopcorn]

I always assume any email like this is a scam. In the last few months I've gotten these from Paypal, Apple, Amazon (not about a password but something about the status of an order I know I didn't place), and Microsoft.

If the company has a spoof reporting email account (usually "spoof @ paypal/amazon/etc), just forward the email to them as is and then go change your password. They'll email you back the standard "what to do now" info and possibly look into it.

[ctujackbauer]

shireguy, is it possible you have a pretty old amazon account that got owned by a security/secret question? I don't think Amazon even allows you to set up a new security question nowadays, they prefer you to 2FA the account.

2FA with SMS/text messages (eh, better than nothing, but not ideal from a security standpoint)
or with an authenticator smartphone app like Google Authenticator (pretty much unhackable from a security standpoint)

And I know it sounds stupid to lock down a freaking Amazon account, but its a high-value target due to its worldwide presence, potential gift card balances, changeable shipping addresses for fencing products, and credit card info (formerly, now all you see is the last four numbers).