Fake Amazon unauthorized order or charge phishing — non-official sender impersonates Amazon falsely claiming an unauthorized order has been placed or an unexpected charge has appeared on the recipient's account, directing them to call a toll-free number or click a link to cancel, dispute, or refund the fraudulent transaction

Phishing emails impersonating Amazon falsely claiming an unauthorized order has been placed or an unexpected charge has appeared on the recipient's account — directing them to call a toll-free number or click a link to cancel, dispute, or refund the fraudulent transaction. When victims call, scammers impersonate Amazon customer service and request remote access, gift card codes, or banking credentials. When victims click, they land on credential-harvesting portals that replicate the Amazon login page. Key facts: (1) FBI IC3 2023: Amazon-branded phishing and impostor fraud is consistently among the top 3 most-impersonated brands in consumer fraud complaints; (2) Amazon sends legitimate order confirmations exclusively through @amazon.com domains with full order details — real Amazon fraud alerts never include a phone number to call or a generic click-here link without order specifics; (3) "Call immediately to cancel" framing is a social engineering technique exploiting the fear of financial loss — Amazon cancellations are handled through the website, never through third-party phone numbers; (4) The fake orders frequently reference specific dollar amounts ($299, $449) to maximize alarm and reduce the victim's impulse to verify independently. Warning signs: sender domain not matching amazon.com, vague order confirmation without item details, toll-free number embedded in the email, urgency to call or click immediately.