Amazon Warns 300M Customers of Holiday Cyberattacks

As the holiday shopping season approaches, online retail giant Amazon has issued an urgent warning to its 300 million active customers about a surge in sophisticated cyberattacks targeting users. With Black Friday just around the corner, cybercriminals are ramping up their efforts to steal sensitive information, including personal details, financial data, and Amazon account credentials.

The Growing Threat of Impersonation Scams

In a recent email sent to customers on November 24, 2025, Amazon highlighted that cybercriminals are increasingly using impersonation tactics to deceive users. These attacks often involve scammers pretending to be Amazon representatives through various channels to gain access to sensitive information.

Common Attack Methods to Watch For

According to Amazon's warning, customers should be particularly vigilant against these specific attack vectors:

• Fake delivery or account issue messages claiming problems with your orders or account status
• Third-party advertisements on social media platforms offering "amazing deals" that seem too good to be true
• Messages through unofficial channels requesting account or payment information
• Suspicious links sent via email, text, or social media that redirect to fake Amazon sites
• Unsolicited tech support calls claiming to be from Amazon's security team

Why the Holiday Season Increases Risk

The holiday shopping period presents a prime opportunity for cybercriminals. A recent FortiGuard Labs report confirmed this trend, revealing that more than 18,000 holiday-themed domains have been registered in the past three months alone. Approximately 750 of these domains have been confirmed as malicious.

The report also noted a concerning increase in domains that mimic major retail brands. Over 19,000 such domains were observed, with 2,900 confirmed as malicious. Many of these fraudulent domains use subtle variations of legitimate brand names—like Amazon—that are easy to miss when shoppers are moving quickly through the holiday rush.

The Data Behind the Threat

The urgency of Amazon's warning is supported by alarming statistics:

• FBI Internet Crime Complaint Center reported over $16 billion in losses from cybercrime in 2024, a 33% increase from the previous year
>A Seon study found that fraudulent transactions are approximately five times higher on Black Friday than during a typical October day
• Cyber Monday sees fraud rates about four times higher than normal

"This year we're guaranteed to see ever more sophisticated scams," warns Anne Cutler, cybersecurity evangelist at Keeper Security, "primarily fueled by artificial intelligence, whether that be convincingly forged order confirmations, spoofed retailer sites and even AI-generated customer service messages designed to steal login details or payment information."

Amazon's Official Security Advice

In response to these threats, Amazon has provided clear guidelines for customers to protect themselves:

1. Use official channels only: Always access Amazon services through the official mobile app or website for customer service, account changes, delivery tracking, and refunds
2. Enable two-factor authentication: Add an extra layer of security by setting up 2FA for your Amazon account
3. Use passkeys: Consider using passkeys as a safer alternative to passwords, utilizing your device's face, fingerprint, or PIN
4. Know official policies: Remember that Amazon will never ask you to make payments or provide payment information over the phone, nor will it send emails asking you to verify your account credentials

Additional Protection Measures

Beyond Amazon's recommendations, cybersecurity experts suggest:

• Regularly monitor your account for unauthorized activity
• Use strong, unique passwords for each online account
• Be skeptical of unsolicited communications, even if they appear legitimate
• Keep your devices and software updated with the latest security patches
• When in doubt, contact Amazon directly through official channels to verify suspicious messages

As the holiday shopping season officially kicks off on November 28 with Black Friday, both Amazon and cybersecurity experts emphasize the importance of remaining vigilant. While the convenience of online shopping is undeniable, the potential risks demand increased awareness and proactive security measures from all 300 million Amazon customers.