Scammers use fake Amazon recall emails to steal logins

Scammers are increasingly impersonating Amazon to steal account details, with Malwarebytes noting that the brand’s vast customer base makes it a frequent target for “spray and pray” phishing campaigns. According to the article, Amazon reportedly has around 310 million active customers, a factor that helps explain the volume of scams using its name. The current lure mirrors a familiar product recall scam, where an email leads recipients to a fake login page designed to capture their Amazon username and password.

The UK’s Mirror reported examples of messages claiming a March 2026 recall, and Malwarebytes urges readers to avoid clicking recall links and instead check their Amazon Message Centre in the account. To protect themselves, readers are advised to change passwords if they fall for the scam, enable two-step verification, monitor bank statements, and report the scam to Amazon.

The piece also promotes Malwarebytes Scam Guard as a tool to help spot scams and includes general guidance on verifying communications and using protection software.