{"success":true,"data":{"id":"fake-amazon-seller-central-suspension-lure","label":"Fake Amazon Seller Central suspension lure — \"your Seller Central account will be suspended in 24 hours, verify your seller account or respond to performance notification\" targeting Amazon FBA / FBM merchants; Seller Central credential harvest leads to disbursement redirect, inventory hijack, customer-PII exfil (2024-2025 Q4/Prime-Day-era phish)","description":"Fake \"your Amazon Seller Central account will be suspended in 24 hours — verify your seller account or respond to performance notification\" email targeting Amazon FBA / FBM merchants. Harvests Seller Central credentials; post-compromise attackers redirect disbursements to attacker-controlled bank accounts, hijack fulfillment to attacker warehouses, exfil customer PII from Seller Central reports, and list counterfeit products under the seller's trust rating. Amazon's real suspension rate (policy violations, ASIN takedowns, performance thresholds, IP complaints) makes this phish highly credible — sellers are primed to react FAST because a suspension during Q4 or Prime Day can wipe out a year's revenue. BleepingComputer, Proofpoint, and Abnormal Security documented sustained 2024-2025 campaigns; 2026 variants add fabricated ASIN numbers and performance metrics. Fires when body references Seller Central / FBA / FBM / ASIN / listing suspension / Account Health Dashboard / brand registry AND contains suspension / deactivation / verify / policy-violation urgency. Excludes amazon.com + all regional Amazon domains + sellercentral.amazon.com + marketplace.amazon.com + amazon-payments.com + amzn.com. Auto-classified as danger via the `-lure` suffix.","tier":"danger","category":"scam","isThin":false}}