Mailing List Archive

Reporting spoofing to Amazon
Needless to say, the producers of spam and other malware are getting
more and more clever.

Amazon is obviously one of the largest targets. I received the e-mail at
the bottom, obviously fraudulent. Normally I mark those and remove them.
In this case I called Amazon. They immediately returned my call and
provided an e-mail address: stop-spoofing@amazon.com

-Ramon F. Herrera

=======================

I include two legitimate replies from Amazon:

From: "Amazon.com"<stop-spoofing@amazon.com>
Reply-To: "Amazon.com"<stop-spoofing@amazon.com>
To:ramon@forcewise.com
Subject: Your Amazon.com Inquiry
Date: Sat, 24 Oct 2020 14:30:59 +0000

Thank you for writing to Amazon.com to bring this to our attention.

Your message has been forwarded to our security department, and we will investigate the situation. Please note that you may not receive a personal response.

In all likelihood, the message you received was not sent to you by Amazon.com. We strongly advise that you *not* send any information about yourself back to this individual (especially your credit card number or any personal information).

If you have already submitted any personal information to this person via e-mail or on a potentially fraudulent web site, you may wish to contact Customer Service for assistance. To send an e-mail to Customer Service, please visithttps://www.amazon.com/contact-us

In the future, if you are ever uncertain of the validity of an e-mail, even from us, don't click on any supplied links--instead, type our web site address"https://www.amazon.com" directly into your browser and follow the regular links to Your Account. Many unscrupulous spoofers mislead consumers by displaying one URL while taking the visitor to another.

By typing in a well-known address you can avoid this trick.

Also, please be assured that Amazon.com is not in the business of selling customer information. Many spammers and spoofers use programs that randomly generate e-mail addresses, in the hope that some percentage of these randomly-generated addresses will actually exist.

If you are trying to contact us about something other than a spoofed e-mail message, please contact Customer Service for assistance. To send an e-mail to Customer Service, please visithttps://www.amazon.com/contact-us/

If you encounter any other uses of the Amazon.com name that you think may be fraudulent, please do not hesitate to contact us again.

Thank you again for taking the time to notify us of this situation.

Sincerely,
Amazon.com
https://www.amazon.com/
Re: Reporting spoofing to Amazon [ In reply to ]
On 10/24/20 7:52 AM, Ramon F Herrera wrote:
>
> Needless to say, the producers of spam and other malware are getting
> more and more clever.
>
> Amazon is obviously one of the largest targets. I received the e-mail
> at the bottom, obviously fraudulent. Normally I mark those and remove
> them. In this case I called Amazon. They immediately returned my call
> and provided an e-mail address: stop-spoofing@amazon.com
>
> -Ramon F. Herrera
>
>
Yes, I've sent many samples of phishing email messages to that Amazon
email address.  I know it well.  :)

Peace...

Tom