Is that call from Amazon about my account a scam?
Yes. Amazon doesn't call you about suspicious orders, refunds, or account suspensions — impersonating Amazon is one of the most-reported scams the FTC tracks.
The setup is a robocall, live call, text, or email claiming to be Amazon: a suspicious $1,499 iPhone order was placed on your account, your Prime membership is auto-renewing at a new price, or your account will be suspended for 'unusual activity.' Press 1 or call back to fix it. The pretext varies; the destination is always the same — a scam call center whose job is to get into your money.
Once you're on the line, the 'Amazon agent' either walks you toward a refund-overpayment con (remote-access software, a faked bank screen, and a plea to return money that was never sent), harvests your card and login through a fake 'verification' page, or escalates: your account was 'used for fraud,' the case now involves 'the FTC' or 'Social Security,' and protecting your savings means moving them to a 'secure account' — the scammers'. Amazon states plainly that it will never call you unprompted and ask for payment, banking information, or remote access to your device.
How does the scam work?
- 01
A fake order or suspension creates the panic
You didn't order an iPhone, so the alert feels like proof someone hacked your account. That fear is the product — it makes you call the number or click the link without checking your actual Amazon account, where no such order exists.
- 02
The 'agent' needs access to 'help' you
To 'process the refund' or 'secure the account,' they have you install remote-access software, log into your bank while they watch, or read out one-time passcodes. Every step is framed as protection; every step is intrusion.
- 03
The refund trick or the 'safe account' move
Classic ending one: a doctored screen shows they refunded $15,000 instead of $150, and you must urgently wire back the difference. Classic ending two: your money is 'at risk' and must be moved to a 'secure' account, or converted to gift cards or crypto 'held by the FTC.' Both endings empty your accounts.
What are the red flags to check?
Amazon contacted you first about fraud
Amazon doesn't make unsolicited calls about orders or account problems, and never asks for payment info, gift cards, or remote access over the phone. The contact itself is the red flag.
The order isn't in Your Orders
Open the Amazon app or type amazon.com yourself and check Your Orders. If the scary purchase isn't there, it doesn't exist. Never check via the link or number in the message.
A callback number or a non-Amazon link
amazon-orders-security.help, amzn-support.center, and every similar domain is fake. Real Amazon pages live on amazon.com. Real Amazon support is reached from inside the app — not from a number in a text.
Remote access, gift cards, or moving money 'to safety'
No legitimate company resolves a refund by controlling your computer, and no government agency or retailer 'secures' your savings by having you buy gift cards or transfer funds. These requests end the question of whether it's a scam.
Escalation to 'the FTC,' 'Social Security,' or police
A fake Amazon call that hands you to a fake federal agent is a documented multi-stage script. Real agencies don't take handoffs from retailer support calls.
Unsure even after checking these? That’s exactly what the $2 Instant URL Check is for — paste the link and get a researched verdict with evidence, instead of guessing.
What should you do right now?
- Hang up, or don't respond. Don't press 1, don't call back, don't click. Engaging marks your number as live.
- Check your real account: open the Amazon app or type amazon.com and look at Your Orders and your payment methods. Verify with your own eyes, through your own front door.
- Report it: forward texts to 7726, report impersonation at amazon.com/reportascam and reportfraud.ftc.gov.
- If you gave access or moved money: disconnect the device, uninstall the remote software, change your Amazon and bank passwords from another device, and call your bank's fraud line immediately.
What the check does: a one-time, researched risk report on the URL you paste. What it doesn’t do: continuous monitoring, takedowns, fund recovery, or legal advice — and we’ll never pretend otherwise.