Amazon’s Prime Big Deal Days sale runs on 6 and 7 October, and scammers have been preparing for weeks. Two separate security studies published ahead of the event point the same way: fake Amazon messages are rising sharply.
What the research found
- Security training firm KnowBe4 says Amazon impersonation attacks rose by 188% between late August and September.
- Check Point Research found newly registered Amazon and Prime Day related web domains climbed for three months running, from 905 in July to 1,284 in September. That is 37% higher than September last year.
The aim is familiar: take over accounts, harvest payment card details and get malware onto devices. According to the report, what has changed is how polished and well-targeted these scams have become.
Why this matters for a small business
Many businesses use Amazon for office supplies, and plenty of staff shop on work devices or use work email for personal accounts. One click on a convincing fake “order problem” or “payment declined” email can hand over a password or a company card. If that password is reused elsewhere, the damage can spread to your email or accounting system.
Simple steps to take this week
- Do not click links in unexpected order emails or texts. Open the Amazon app or type the address yourself to check your orders.
- Turn on two-step verification for any Amazon account used by the business.
- Use unique passwords, ideally stored in a password manager, so one stolen login does not unlock everything.
- Remind your team that urgency, a deal that looks too good and requests for card details are warning signs.
- Check company card statements for purchases you do not recognise, and report anything suspicious to your bank straight away.
These scams peak around big sales, but the same tricks are used all year round. A quick refresher for your team now is time well spent.
Worried this affects your business? Get a free 15-minute IT check – call Trends IT on 0485 011 911 or visit /contact/.