Amazon Scam Alert: How Fraudsters Use One-Time Passcodes to Drain Bank Accounts
Amazon customers warned over new one-time passcode scam

Millions of Amazon customers across the UK are being urged to exercise extreme caution when answering unsolicited phone calls, following a stark warning from consumer champion Which? about a sophisticated new fraud tactic.

The Anatomy of the Amazon Passcode Scam

The scam, which is currently active nationwide, begins with a convincing phone call. The fraudster on the line claims to be from Amazon's security team and will often already possess personal details like your name, mobile number, and email address, likely sourced from previous data leaks.

The caller's goal is to create a sense of panic. They will falsely allege that your Amazon account has been used to make several high-value purchases. To 'resolve' this urgent issue, they inform you that a one-time passcode (OTP) will be texted to your mobile phone by Amazon and ask you to read it out to them.

Which? experts clarify that while the text message is genuinely from Amazon, it has been triggered by the scammer attempting to log into your account or change your password. By handing over this code, you provide the final piece of information the criminal needs to bypass security and seize control of your account.

Consequences and Amazon's Official Response

Once inside, the fraudster can access any stored payment card details and make purchases in your name, potentially draining linked bank accounts. Victims are often left feeling helpless as they are locked out of their own accounts during the attack.

An Amazon spokesperson told Which?: "Scammers that attempt to impersonate Amazon put consumers at risk, and we will continue to invest in protecting consumers and educating the public on scam avoidance." The company issued a crucial reminder: Amazon will never contact you first to ask for your password, verification passcodes, or security answers. They may only ask you to verify your identity if you have called their customer service first.

How to Protect Yourself and Report Fraud

If you receive a suspicious call, hang up immediately. Do not press any buttons or provide any information. You can report scam calls received on your mobile by forwarding the suspicious number to 7726.

If you have lost money, act swiftly:

  • Contact your bank immediately using the number on the back of your card.
  • Report the fraud to Action Fraud via the Report Fraud website.
  • If you are in Scotland, call Police Scotland on 101.

This warning comes alongside another alert for WhatsApp users about a separate threat known as 'GhostPairing', discovered by cybersecurity firm Avast. The consumer landscape is increasingly fraught with digital dangers, making vigilance more critical than ever.