The fraudulent operation leverages browser notifications sent through compromised or malicious websites, which have surged as consumers flock online searching for holiday deals.
According to data from FortiGuard Labs, more than 700 harmful holiday-themed domains have been registered recently, many containing keywords like “Christmas,” “Black Friday,” and “Sale” to lure unsuspecting shoppers.
Amazon cautions users about fake messages claiming delivery or account issues, deceptive third-party offers on social media, and solicitations via unofficial channels demanding payment or personal details.
Cybersecurity experts report a sharp escalation in these scams during the holiday season. Sophisticated fake shopping websites, often employing AI to mimic authentic retailer pages, have mushroomed by over 200%, making them increasingly difficult to detect.
This surge coincides with a 620% rise in malicious emails targeting holiday shoppers, frequently containing links to fraud sites designed to harvest payment information. A 2025 global survey found 68% of consumers struggle to distinguish real from fake websites, underscoring the urgency of heightened vigilance.Amazon stresses vigilance as the best defense, advising customers never to click on unsolicited links or browser notifications, always verify website URLs manually, and be skeptical of deals offering unrealistically deep discounts. Consumers are recommended to avoid shopping on public Wi-Fi, monitor bank statements carefully, and immediately change passwords or contact financial institutions if suspicious activity is detected.
FAQs
How do scammers trick Amazon users during Black Friday?
They send fake delivery or account issue alerts via browser notifications or emails and create counterfeit websites that mimic Amazon to capture login and payment details.
What should I do if I fall victim to these scams?
Immediately change your Amazon password, notify your bank or card issuer, monitor transactions, and report the scam to Amazon and relevant authorities.