(CMR) Holiday shoppers are being told to be on high alert after a number of Amazon customers have fallen prey to a new email phishing scam.
Customers are receiving emails purporting to be from Amazon asking them to reset their passwords by clicking on a link. Once the customer clicks on the link, they are redirected to a lookalike Amazon page that asks the customer for their username and current password. When that information is provided, the scammer has access to ALL of your account information, including your credit card details.
The scammers are immediately using your credit card to buy instant gifts such as gift cards that can be delivered to them electronically.
At this time, Amazon has not been able to trace the scam back to the person responsible.
Amazon is urging customers to go directly to their account to login rather than clicking on a link in an email to access their account, as this prevents scammers from accessing your information.
Remember an easy way to verify an email also is to look closely at the email that was used to send it – in most cases, it's obvious that it's not a legit email address from Amazon.