An Amazon scam

[Gene Howe]

Heads up, everyone!!! Got an email from Amazon telling me that, at my request, my email id had been changed in their system and they provided me with the new address. I had not requested any changes and the "new address" was totally unfamiliar. I immediately called Amazon. They had to cancel my account and my Amazon Prime Rewards CC. They said that if the scammer was able to get into my Amazon account to change my email, that they had my CC info, also. 

Be watchful, guys.

[davebodner]

So, I take it Amazon sent the email to ensure it was really you who asked for the address change?

[Gene Howe]

So, I take it Amazon sent the email to ensure it was really you who asked for the address change?

It read like that they were simply confirming the change.

[garys]

I quit buying through Amazon many years ago after my credit card got fraudulant charges on it. My bank told me that they get a lot of fraudulant charges on cards that get used on Amazon. That was enough for me.

[Gene Howe]

Been with Amazon quite a few years. This is the first bit of trouble. I have their CC and, I only use their CC on their site.

[ChrisNeilan]

I use Amazon quite a bit, no issues.

[john_001]

I haven't had any issues with Amazon, but I've had a few fraudulent attempts on a CC. Usually, they'll "test" the card by making some little on-line purchase, like a gym membership or dating service and if it goes through, then they'll hit it with big purchases.

It sounds like someone may have gotten your Amazon PW. One thing you have to watch out for with Amazon is if someone steals your PW at some other site, the first thing they'll try is to log onto big-money e-commerce sites like Amazon to see if you used the same PW. If you did, once they have your Amazon PW, you're toast - they're now basically you.

[jsburger]

I have to say that I have been using Amazon for a long time with no issues. I use my Credit Union credit card which is very closely monitored by them. I have never had a hint of a problem. I also always pay with PayPal.

I have used my credit cards all over the world with no problems. However, most of that time was in the Air Force prior to the internet so I guess that does not count.

Now my Credit Union has an App called card guard. I can turn my cards (Debit and Credit) on and off and I also get a notification on my phone when a charge is made. It really works great.

The only thing that has ever happened was about 5 or 6 years ago. I got a pending charge on my debit card for $0.03 (yes 3 cents) the credit union denied it. It happened 2 more times and the CU denied it. It was from a resteraunt in Georgia. I called them and they said yes they knew this was happening sometimes. They had no explanation. Huh? I called my CU and they issued me new carda with a different number. I didn't have to close my account or anything. Just new credit card numbers. Problem solved and no issues since.

[Gene Howe]

It sounds like someone may have gotten your Amazon PW. One thing you have to watch out for with Amazon is if someone steals your PW at some other site, the first thing they'll try is to log onto big-money e-commerce sites like Amazon to see if you used the same PW. If you did, once they have your Amazon PW, you're toast - they're now basically you.

That's probably what happened to me. In the process of changing all passwords now. A real PITA, time consuming chore.

[john_001]

Nowadays, you almost have to use some sort of password manager to keep track of passwords so you're never tempted to use something simple or re-use one, especially for any site where you can buy stuff, banks, CCs or 401(k) accounts. I'm up to 81 of them, all different 12-16 characters of random garbage - I can't even enter a password manually without two or three tries!

I use Roboform (and keep them also in a book). Here's an example of one generated by Roboform: nE^2W2Mmi5rN - you wouldn't want to try to remember this. I think Firefox and other browsers have something built in to remember passwords.

BTW, Amazon allows you to set up two-factor logon - you log on with your PW and they text a verification code to your cell, which you then have to enter in order to finish the logon. Even if your PW is stolen, they can't log on, unless they've also stolen your phone. A lot of financial sites also offer the service.