We can’t seem to go a day without getting a spam call or text, and now scammers are using a new tactic to try and separate you from your hard earned money: fake Amazon recall links.
It’s an easy scam to fall for if you shop on Amazon at all (who doesn’t?), which is exactly why scammers have stepped up this trick recently. Here’s what the scam entails, and how you can avoid having your Amazon account password — and all your saved credit card information that goes with it — stolen.
How Does the Scam Work?
Hackers are targeting your Amazon Prime account by posing as Amazon in text messages in a recent phishing campaign. They’re sending out fake Amazon product recall texts that mimic real ones, according to Guardio, a cybersecurity firm.
“Dear Amazon Customer,” the fake text begins. “We are reaching out regarding a product associated with your December 2025 purchase… this item has been included in an official recall.”
“Additional information about the recall and instructions on how to request a refund are available through the following authorized page,” the text message continues, along with a link that does not have Amazon in the URL.
If someone clicks on the link, it takes them to a fake Amazon page that looks almost identical to the real thing. There, you’re prompted to enter your Amazon Prime login and password, but that information goes directly to the hackers. Then, they will be able to log in to your account on the real Amazon website, allowing them to purchase items or steal your stored credit card information to use in other places.
How Do I Avoid Being Scammed?
If you get the exact text message above, do not click on the link. Delete the text and report it as spam, if that’s an option on your phone. There’s no danger of anyone stealing your information if you don’t click the link.
In general, it’s best not to click any links from text messages. So if you get a text from your bank, for example, instead of clicking the link, open the bank’s website in a browser or use the bank’s mobile app to check your notifications and messages that way. If something is actually important, banks and companies will contact you in ways other than a text message.
To safeguard your Amazon account from hackers further, you can create a passkey for your account. That includes logging in with something like Face ID, fingerprint, or PIN as an extra layer of security that scammers won’t be able to crack.
Amazon has also published extensive advice for avoiding becoming a victim of this type of impersonation scam. It includes tips like ignoring false urgency in scam texts and emails, verifying your purchases on Amazon’s website, and contacting Amazon directly when in doubt to verify whether a text is legitimate or not.
