The main difference between Security Assertion Markup Language (SAML) and Open Authorization (OAuth) lies in their roles: SAML focuses on authentication, while OAuth is dedicated to
In 2023, Amazon Prime Day totaled $12.9 billion in sales in only 48 hours. With limited-time deals, many Amazon users get ready to shop during Prime Day and scammers use this to their advantage.
As you get ready to shop, it’s important to be aware of the scams that take place before, during and after this event. Some common scams to look out for during Amazon Prime Day include phishing scams, spoofed Amazon websites and deals from other websites that seem too good to be true.
Continue reading to learn more about these Prime Day scams and how you can keep yourself protected.
1. Amazon phishing scams
Phishing is a type of cyber attack in which cybercriminals attempt to convince unsuspecting targets to reveal or hand over sensitive information. Typically, phishing scams leverage social engineering techniques to make it seem as though the scammer is someone the victim knows or a company they trust. In this particular scenario, scammers would pretend to be Amazon.
Here are a few examples of Amazon phishing scams that you may encounter during Prime Day.
- An email from Amazon claiming that you’ve won something – The email would contain language urging you to click a malicious link to claim your “prize”
- A text message from Amazon claiming there’s been a suspicious login attempt on your account – This scam would prompt you to click on a malicious link that would direct you to a spoofed Amazon website where you’re prompted to enter your personal information
- A phone call from Amazon claiming your Prime membership has expired or been canceled – The “Amazon representative” would then ask you to provide them with your personal information like your credit card number to renew your membership
2. Spoofed Amazon websites
One type of spoofing attack that is common during Prime Day is spoofed Amazon websites. In June 2022, a month before Prime Day kicked off, CheckPoint security researchers identified 1,900 new domains related to the term “amazon.” Researchers found that 9.5% of these domains were either malicious or suspicious. Spoofing attacks involve scammers creating websites that look legitimate but are designed to steal information and compromise user’s legitimate accounts. The spoofed site’s URL, also known as the website address, would resemble a legitimate site; however, if you were to look closely at the URL you would find inconsistencies. For example, a spoofed Amazon website may have a URL that looks like Amaz0n.com, where the “o” is replaced with a zero.
If you land on a spoofed website, one of two things could happen:
- You’re prompted to enter your personal information on the spoofed site, which means you’re essentially handing it over to the scammer
- Being on the spoofed website could immediately begin downloading malware onto your device which could also lead to your personal information being compromised
3. Deals that seem too good to be true
With so many discounts taking place during Prime Day, there tend to be discounts also happening on other websites that are competing with Amazon. Scammers use this to their advantage to offer too-good-to-be-true discounts on items that are in high demand on their own malicious sites. As a buyer, you may be intrigued to purchase from these sites so you get the best deal, but this might not be the safest option. If an item is heavily discounted, it might be because it’s a scam, so you have to be extremely careful about the sites you’re contemplating purchasing from.
How to stay safe from scams during Prime Day
Here are a few tips to keep you safe from scams during Amazon Prime Day.
Shop directly from Amazon’s website or app
To ensure you’re purchasing from Amazon and not a spoofed Amazon website, only shop from Amazon’s official site, Amazon.com, or stick to shopping from the company’s official app, which you can find in the App Store or Google Play Store.
Don’t click on unsolicited links and attachments
If you receive any unsolicited links or attachments that claim to be coming from Amazon, it’s recommended to not click on them, especially if you’re unsure about whether they’re safe. Even if you were to receive a message about a suspicious login attempt, it’s safer to navigate to your account yourself rather than relying on a link that could be dangerous.
Be wary of people asking you for personal information
Amazon will never call or message you to confirm personal information or ask you to provide them with sensitive information such as credit card details or login information. If someone from “Amazon” is asking you to reveal any personal information, don’t provide them with anything and block them. You can also report the scam to Amazon on their website.
Secure your Amazon account
As a security best practice, you should also ensure that your Amazon account is protected with a strong password. The best way to create a strong password is by using a password generator. If you’re worried about not being able to remember your password, a password manager can help with generating and securely storing your passwords. For even more security, you can enable passkey login on your Amazon account, which not only increases the security of your account but also makes it a lot easier to log in.
Read reviews before purchasing
Before purchasing anything on Amazon or any other site, make sure to thoroughly read through reviews. This ensures that you’ll get the item as described and that you’re not being scammed into purchasing something you’ll never receive or something completely different than intended. However, be extra vigilant with Amazon reviews because they can be easily faked.
Pro Tip: Filter the reviews so the most recent ones are displayed in case there are any fake reviews.
Avoid getting scammed during Prime Day
Many people look forward to Prime Day because of the shopping deals that are available during this time. However, this also increases the amount of scams. Knowing about common Amazon scams that are present during Prime Day can make all the difference in keeping yourself, your data and your money protected.