Amazon Prime Day Cyber Threats

Amazon Prime Day Cyber Threats: What Every Online Shopper Needs to Know

Amazon Prime Day started as a viral shopping event for consumers. It became an equally viral opportunity for cybercriminals. Every major online sales event, whether it is Prime Day, competing retailer sales, or holiday shopping weekends, brings a predictable surge in phishing attacks, spoofed websites, and fraudulent offers designed to separate you from your payment information. The threats have multiplied as more retailers launch their own versions of these events throughout the year.

Brian M. Howell, Chief Strategy Officer and CISO at People Driven Credit Union, shares the following guidance to help members stay safe.

The Four Most Common Cyber Threats During Online Sales Events

1. Manufactured Urgency

The most effective tool a cybercriminal has is your fear of missing out. Fake sales pages and phishing messages use language like “Flash Sale,” “Only 2 Left in Stock,” or “Deal Ends in 10 Minutes” to pressure you into clicking and buying before you think. That rush is exactly what they are counting on. When you are in a hurry you are less likely to notice that the URL is slightly wrong, that the email came from an unfamiliar sender, or that the checkout page does not look quite right. Slow down. A real deal will still be there after you take 30 seconds to verify where you are.

2. Spoofed Emails and Websites

Criminals can copy the logos, fonts, colors, and layout of any major retailer in minutes. A spoofed Amazon, Target, or Walmart page can look nearly identical to the real thing. The difference is usually in the URL. Look at the address bar carefully before you enter any payment information. A legitimate Amazon page will always be on amazon.com. An extra letter, a hyphen, or a different domain extension like .net or .shop is a sign you are on a fake site.

Never click links in unsolicited emails or text messages that take you to a shopping page. Always navigate directly to the retailer’s website by typing the address yourself or using a saved bookmark.

3. Offers That Are Too Good to Be True

A 50 percent or 75 percent discount on a high-demand item is designed to override your skepticism. These offers are usually combined with urgency tactics to push you into acting before you can stop and think. If a deal seems implausible, it probably is. Search for the same item on the retailer’s official website before you buy from an unfamiliar source. If the deal does not exist there, it does not exist.

4. Fake Subscription and Membership Renewals

Cybercriminals are not just targeting shoppers buying products. Phishing attacks targeting subscription services and gym memberships are increasingly common, especially when criminals obtain compromised mailing lists that tell them where you already shop or what services you use. You may receive a convincing offer to renew your membership at a discounted rate. If you receive an offer like this, do not use the phone number or email address in the message to verify it. Go directly to the company’s official website or call a number you find there independently.

The Simple Rule That Prevents Most of These Amazon Prime Day Cyber Threats

Go directly to the website. Every time. Do not click links in emails, text messages, or social media ads that take you to a checkout or login page. Type the retailer’s address yourself or use a trusted bookmark. That one habit eliminates the vast majority of phishing and spoofing attacks because the fraudulent page never gets the chance to load.

For more information on protecting yourself and your personal information online, visit our fraud alerts page.