10/1/23 replace provides Amazon assertion beneath.
Amazon mistakenly despatched out buy affirmation emails for Accommodations.com, Google Play, and Mastercard present playing cards to clients, making many fearful their accounts have been compromised.
The emails have been despatched out final night time, with clients reporting receiving three separate emails from Amazon Prime for every alleged present card buy. Nevertheless, no purchases are discovered of their Amazon Prime accounts.
“I simply randomly acquired 3 present card emails in a row (inside a minute) from amazon ([store-news@amazon.com](mailto:store-news@amazon.com)) and I’m actually confused by this,” reads a Reddit publish the place many Amazon clients reported receiving the emails.
Information of the emails was additionally closely reported on social media, with cybersecurity researcher Mike Grover (_MG_) sharing screenshots of the acquired emails on X.
The emails used a topic line much like “Essential details about Accommodations.com present card order” and had an electronic mail handle of store-news@amazon.com.
“Thanks for buying Accommodations.com present playing cards from Amazon.com,” reads the e-mail despatched to Amazon clients.
“We wish our clients to pay attention to some necessary data referring to buy of Accommodations.com present playing cards.”
“There are a number of scams wherein fraudsters attempt to trick others into paying with present playing cards from well-known manufacturers. To be taught extra about some widespread rip-off makes an attempt which will contain asking for fee utilizing present playing cards please click on on the button beneath, or alternatively contact us now.”
The ‘See extra data’ button hyperlinks to a internet web page on Amazon.com that explains how present playing cards are generally requested as fee in on-line scams.
The e-mail headers present that they have been despatched utilizing Amazon Easy E mail Service (SES) and handed DKIM and SPF authentication headers, indicating that the emails have been verified as coming from Amazon.
Whereas Amazon’s media contact has not responded to our queries in regards to the emails, a assist agent advised BleepingComputer that they have been despatched to all clients in error.
Replace 10/1/23 6:41 PM ET: Amazon has confirmed that the emails have been despatched by mistake and can be contacting all impacted clients.
n error in our electronic mail system resulted in an order affirmation electronic mail being despatched to clients who didn’t buy a present card,” an Amazon spokesperson advised BleepingComputer.
“We’ve fastened this error so it gained’t occur once more, and are emailing these clients to tell them of the error and apologize for the inconvenience.”
