Beware of fake Amazon order confirmations

If you buy lots of stuff from Amazon.com — as I do — you might be fooled by receiving a message like the one below. It certainly looks real, as it came from a legitimate-looking email address. However, a real Amazon order confirmation lists exactly what you ordered. This scam message does not.

Also, a real Amazon.com order confirmation would not have been sent as a bcc to one of our info@ email addresses. Or have entered the mail stream via an unsecured SMTP relay server belonging to a law firm in Minneapolis.

In the email, the line labeled “ORDER DETAILS” is a link that goes to an online store selling “adult supplements,” if you know what I mean. I’ve seen other messages like this that bring you to a fake Amazon.com login screen, where you might be tricked into entering your username and password. That’s bad, bad, bad.

That is the only bogus link in the message. All the other links actually go to Amazon.com

Be very careful about clicking links in email messages, even if they appear to be from a legitimate sender.

From: “email hidden; JavaScript is required
Date: March 16, 2010 2:38:37 PM PDT
To: Subject: Amazon.com – Your Confirmation (464-18147-30235)

Dear Customer,

Your order has been successfully confirmed. For your reference, here`s a summary of your order:

You just confirmed order #592-60631-10566

Status: CONFIRMED
_____________________________________________________________________

ORDER DETAILS
Sold by: Amazon.com, LLC
_____________________________________________________________________

Because you only pay for items when we ship them to you, you won`t be charged for any items that you cancel.

Thank you for visiting Amazon.com!

———————————————————————
Amazon.com
Earth`s Biggest Selection
http://www.amazon.com
———————————————————————

@bzmedia.com>@amazon.com>

Z Trek Copyright (c) Alan Zeichick