Amazon Phishing Scams Target Prime Members with Fake Billing Alerts

• •A phishing campaign targets Amazon Prime members with fake billing alerts.
• •Victims are led to a fraudulent site mimicking Amazon's interface to steal credentials.
• •Amazon will not request sensitive information via unsolicited emails.

A new phishing campaign targeting Amazon Prime members has emerged, utilizing fake billing alerts to steal login credentials and payment information. The scam begins with an email claiming a payment issue, urging recipients to update their billing information within 48 hours to avoid cancellation. Victims are directed to a fraudulent website that mimics Amazon's interface, where they are prompted to enter their login credentials and personal details. Hackread.com documented the attack on September 29, 2026, revealing that the phishing site closely resembles legitimate Amazon pages. The campaign exploits familiar branding and urgency to deceive users, making it difficult to identify as fraudulent. Amazon has not confirmed the specific phishing campaign but emphasizes that they will never request sensitive information via unsolicited emails. Users are advised to verify any suspicious communications through official channels.