Amazon Prime Day represents an opportunity for consumers to find deals and save money on their favorite products. But it's also a chance for cybercriminals to take advantage of another hot topic to try to scam people. In a report released Wednesday, fraud prevention company Bolster looks at scams exploiting Amazon's popular sales event and offers tips on how to avoid them.
For 2021, Prime Day will be on June 21 and 22, a return to its usual summer slot.
When rumors of an October Prime Day started to surface last summer, Bolster noticed a rise in Prime Day phishing and scam websites.
One type of new Amazon scam site already detected by Bolster has been promoting "Early Prime Day Deals" just like the real Amazon site has done. The phony sites look just like the actual thing, while the URL even contains the domain name of Amazon.com. One of these sites is hosted by a Chinese company in Los Angeles, and the IP address has been used for several other phishing sites. But those aren't clues the average person would pick up. The goal behind such sites is to grab money from the consumer for goods that never get delivered.
Another type of site prompts shoppers to set up an Amazon wallet as a promotion to cash in on all the Prime Day deals. The purpose of these sites is to collect the consumer's credit card information while setting up the alleged Amazon wallet. Naturally, that data is then used for fraudulent purchases or is sold on the dark web. One site found by Bolster is hosted in Moscow with an IP address used for 89 other phishing sites.
To protect yourself from these scam Amazon sites and stay safe on Prime Day, Bolster offers three tips:
Start at Amazon.com The typical way to take consumers to a scam site is through phishing or spam email or text. To avoid this prospect, don't click on links in emails or texts, even ones you think may come from Amazon. Instead, go directly to Amazon.com to do your Prime Day shopping.
Set strong passwords and don't reuse them. People who rely on weak passwords or use the same ones across multiple sites are taking a chance. If the password for your Amazon account is the same as the ones for your bank account and email account, then a compromise of one leaves the others vulnerable. Your best bet is to use a password manager, which can create and store different complex passwords for every account.
Avoid deals that are too good to be true. Scammers know that everyone loves a deal to the point that people may ignore an obvious scam in an attempt to score their favorite product. Conduct research before your Prime Day shopping to get a sense of the prices for the items you want to buy. If you see a price far below those levels, then investigate before you purchase.
Excerpted from Tech Republic, Lance Whitney
