Amazon Scam Email: How to Spot and Avoid Fake Emails in the UK
Scammers are sending fake Amazon emails to UK customers—here's exactly how to tell them apart from the real thing.
What is this scam?
Amazon scam emails are phishing messages that impersonate the genuine Amazon company to trick UK customers into revealing sensitive information or clicking malicious links. Scammers create emails that look almost identical to real Amazon communications, using the company's logo, colours, and language to appear trustworthy. The emails typically claim there's a problem with your account—such as unusual login activity, payment failure, or a suspended order—and urgently ask you to click a link or log in immediately. Once you click the link, you're taken to a fake Amazon website (which looks identical to the real one) where you enter your email address, password, and sometimes payment card details. The scammers then use this stolen information to access your real Amazon account, make purchases, change your password, or sell your details to other criminals. These scams are particularly effective because Amazon is so widely used in the UK that most people have an account and trust emails from the company.
Warning signs to look for
- The email address doesn't match Amazon's official domain (amazon.co.uk). Look carefully at the sender—scammers often use addresses like amazon-security@gmail.com or amazon.co.uk-verify@outlook.com.
- The email asks you to confirm or reset your password, verify payment details, or update your account information by clicking a link. Amazon never asks you to do this via email.
- There's a sense of false urgency—phrases like "your account will be closed in 24 hours" or "immediate action required" are classic scam tactics.
- The link in the email doesn't match Amazon's official website. Hover over any links (don't click) to see the real URL—it should say amazon.co.uk, not something else.
- The email contains spelling, grammar, or formatting mistakes. Amazon's genuine emails are professionally written.
- Your name isn't mentioned in the email, or it uses generic greetings like "Dear Customer" instead of your full name.
- The email asks you to provide personal information like your full card details, CVV, or security questions. Amazon already has this information.
- The email threatens to suspend your account or mentions a "refund" you didn't request.
How this scam works step by step
Step 1: You receive an email that appears to be from Amazon, often claiming there's been suspicious activity on your account or a payment has failed. The email uses Amazon's branding and language to look completely legitimate. Step 2: The email includes a link and asks you to click it urgently to verify your account, confirm payment, or resolve a security issue. Step 3: You click the link, which takes you to a fake Amazon website. This fake site is almost identical to the real amazon.co.uk—same colours, logos, layout, and design. Step 4: You log in using your email address and password. The fake site accepts your details and may even ask for additional information like your date of birth, full card number, or security questions. Step 5: The scammers now have your login credentials and personal information. They log into your real Amazon account and either make unauthorised purchases, change your password to lock you out, steal your saved payment methods, or sell your information to other criminals. Step 6: You may not notice anything is wrong until you see unexpected charges on your bank account or receive emails about orders you didn't place.
How to verify if it is genuine
First, don't click any links in the email. Instead, go directly to amazon.co.uk in your browser by typing the URL yourself or using a bookmark you created earlier. Log in to your account and check your messages or account settings to see if there's a genuine notification. Second, check the sender's email address carefully. Amazon's official emails come from addresses ending in @amazon.co.uk or @amazon.com—not Gmail, Outlook, or other free email services. Third, look at the email headers. Most email clients allow you to view the full email header, which shows the true origin of the message. If the header doesn't show Amazon's legitimate servers, it's a fake. Fourth, contact Amazon directly using the phone number or contact details on the official website (not from the email). You can also visit your Amazon account online and message Amazon's customer service through your account to ask if the email was genuine. For more detailed verification steps, read our guide on how to check if a website is a scam at /guides/is-this-website-a-scam/.
What to do if you have already interacted
If you've already clicked the link or entered your details, act immediately. First, change your Amazon password right now using a different device or browser, then log out of all active sessions on your account. Go to your Amazon account settings and review your recent orders, payment methods, and account information to check for any unauthorised changes or purchases. If you see suspicious orders, cancel them immediately and contact Amazon's customer service by visiting amazon.co.uk and using their official 'Contact Us' page, or call 0800 496 1081 to report the fraud. Second, check your linked bank or credit card accounts for unauthorised transactions. If you see any, contact your bank immediately to report fraud and request a new card if necessary. Third, enable two-factor authentication on your Amazon account to prevent further unauthorised access. Fourth, monitor your email inbox for any password reset requests or unusual account activity notifications. Fifth, if you've given scammers your full card details or personal information, consider placing a fraud alert with Experian, Equifax, or Callcredit (the three UK credit reference agencies) to protect against identity theft. Finally, report the scam to Action Fraud and the NCSC (see section 6 below).
Reporting this scam in the UK
Report the fake email to the National Cyber Security Centre (NCSC) Suspicious Email Reporting Service by forwarding it to report@phishing.gov.uk. Include the full email (with headers if possible) so they can track the scam and potentially take down the fake website. Next, report the incident to Action Fraud, the UK's national fraud reporting centre, either online at actionfraud.police.uk or by calling 0300 123 2040. Provide them with copies of the email, any links you clicked, the fake website URL, and details of any information you shared. You can also report the fake Amazon website directly to Amazon themselves by forwarding the phishing email to stop-spoofing@amazon.co.uk, which helps them identify and remove fake sites faster. If you've lost money or had unauthorised transactions, also report this to your bank or credit card provider immediately—they may be able to reverse charges or freeze accounts. For additional consumer rights information and support, contact Citizens Advice consumer helpline on 0808 223 1133 (free and confidential). Keep copies of all emails, screenshots, and correspondence for future reference and insurance claims if needed.
Frequently asked questions
Is Amazon itself a scam, or is it the emails that are fake?
Amazon itself is a legitimate company used by millions of UK customers safely every day. The scam is the fraudulent emails pretending to be from Amazon—they're created by criminals impersonating the company. The real Amazon will never ask you to verify your password or payment details via email.
What should I do if I've already sent money to these scammers?
Contact your bank or payment provider immediately to report the fraud and ask if the payment can be stopped or reversed. If you used a debit card, you may be covered by chargeback protection. Report the scam to Action Fraud (0300 123 2040) and keep all evidence of the fraud. Your bank may be able to recover the money, but you must act quickly—within 24 hours if possible.
I clicked on the link in the email but didn't enter any details—am I at risk?
You're at lower risk if you didn't enter any information, but you should still be cautious. Clicking a malicious link can sometimes install malware on your device or confirm your email address is active (leading to more scam emails). Change your Amazon password anyway as a precaution, keep an eye on your account for unusual activity, and consider running a malware scan on your device using reputable antivirus software.
How do I report a fake Amazon email?
Forward the email to the NCSC at report@phishing.gov.uk (they'll investigate and remove fake websites), report it to Action Fraud at actionfraud.police.uk or 0300 123 2040, and notify Amazon directly at stop-spoofing@amazon.co.uk. Don't delete the email—save it as evidence in case you need it for insurance or legal purposes.