Overview

Phishing attacks targeting Amazon sellers remain one of the most common threats to account security. Fraudulent emails designed to look like official Amazon communications attempt to trick sellers into revealing sensitive login credentials, financial information, or other personal data. Understanding how to identify these spoofed messages is essential for keeping your Seller Central account and business safe.

Key Points / What Sellers Need to Know

• Phishing emails mimic Amazon branding — Spoofed emails are carefully designed to look like legitimate Amazon correspondence, often directing sellers to fake websites that closely resemble real Amazon pages in order to harvest account credentials.
• Amazon will never ask for sensitive data via email — Amazon does not request bank account numbers, credit card details, PINs, security codes, passwords, or identity verification answers (such as your mother's maiden name) through email.
• Verify the sender's email domain — Legitimate Amazon emails always come from addresses ending in "@amazon.com" or other verified Amazon domains. Any email from a non-Amazon domain claiming to be Amazon is fraudulent.
• Hover before you click — Before clicking any link in an email, hover over it to reveal the actual destination URL. Legitimate Amazon links always end with ".amazon.com", "amazonsellerservices.com", or "sellercentral.amazon.com".
• Report suspicious emails to Amazon — Sellers can forward spoofed emails with full header information using Amazon's phishing report form to help Amazon take legal and technical action against scammers.

How Phishing Emails Work

Spoofed emails targeting Amazon sellers typically follow a predictable pattern. The sender crafts a message that appears to come from Amazon, often referencing account issues, payment problems, or enticing offers like discounts and free items. These emails contain links that redirect to convincing but fraudulent websites where sellers are prompted to enter their email address, password, or financial details. Once submitted, this information is captured by the attacker and can be used to hijack seller accounts, redirect payouts, or commit other forms of fraud. Many phishing emails originate from non-English-speaking attackers, so grammatical errors and awkward phrasing are common red flags.