NEW YORK — As the holiday shopping frenzy peaks, Amazon has issued an urgent 48-hour alert to its millions of customers, warning of a surge in sophisticated phishing attacks that could compromise accounts and personal data. With Cyber Monday underway, experts emphasize that enabling enhanced security features like passkeys could prevent costly breaches during this high-risk window.
The notice comes amid a dramatic uptick in scams, with attacks targeting Amazon users jumping 620% in November alone and expected to climb another 20-30% through November 29. “The threat has not yet peaked,” security analysts note, highlighting how cybercriminals are leveraging artificial intelligence to craft convincing lures that mimic official communications. Amazon, the most impersonated brand in retail phishing accounting for 80% of such attacks against major companies urges users to scrutinize messages and verify account status immediately.
The Surge: AI-Powered Scams Target Holiday Distractions
Phishing schemes have evolved into highly polished operations, stripping away old red flags like spelling errors or clunky designs. Attackers now deploy AI to generate urgent texts or emails claiming account suspensions, failed payments, or exclusive deals, prompting clicks to fraudulent sites that harvest login credentials or financial details. Common traps include fake refund offers or “too-good-to-be-true” discounts on non-existent products, exploiting shoppers’ excitement and decision fatigue.
“Black Friday has become a hunting ground for cybercriminals armed with AI,” the report states, with thousands of deceptive domains registered monthly to fool the eye—such as subtle URL tweaks that pass a quick glance. Americans alone lost over $432 million to online shopping fraud in 2024, and projections for 2025 point to record-breaking figures as these tactics reach “unprecedented sophistication.”
Amazon has proactively reached out to customers with educational messages starting in early November for U.S. users and this week for those in the U.K., focusing on spotting impersonation attempts. “Ultimately, security is a shared responsibility. Consumers can benefit by staying vigilant and shopping wisely, while businesses must maintain their security posture to promote trust and confidence,” the company advises.
Proactive Protection: Passkeys and Vigilance as Key Defenses
In a positive development, hundreds of millions of Amazon users have already upgraded to passkeys, a passwordless authentication method that uses biometrics like face ID, fingerprints, or device PINs for seamless, secure logins. Amazon promotes this as a frontline defense: “To securely sign in to your Amazon account you can enable a passkey to simply use your face, fingerprint, or the PIN that you use to unlock your device. Passkeys are a convenient and secure way to sign in to your Amazon account without using a password.”
Experts recommend an “identity-first mindset” to counter the risks, including:
- Immediate Checks: Review your Amazon account for unauthorized activity and scan inboxes for suspicious messages during the next 48 hours.
- Link Scrutiny: Hover over hyperlinks to reveal true destinations; legitimate Amazon communications never demand immediate action via unsolicited links.
- Two-Factor Boost: Layer passkeys with multi-factor authentication to block credential theft.
- Report and Recover: If targeted, forward scam emails to Amazon’s anti-phishing team at stop-spoofing@amazon.com and change passwords promptly.
“This year we’re guaranteed to see ever more sophisticated scams, primarily fueled by AI… A few proactive steps, coupled with an identity-first mindset, can make the difference between a money-saving bargain and a costly breach.”
Broader Implications: A Shared Win for Shoppers and Retailers
Amazon’s swift response not only safeguards its vast user base but also sets a benchmark for the e-commerce industry, where brands like Walmart, Costco, and Apple face similar threats. By prioritizing passkey adoption—where Amazon leads globally—the company is empowering users to shop confidently amid the holiday rush.
As Cyber Monday sales shatter records, this alert serves as a timely reminder that robust digital defenses can turn potential vulnerabilities into secure, enjoyable experiences. For step-by-step guidance on enabling passkeys, visit Amazon’s security hub at amazon.com/security. Stay safe, shop smart, and let the festivities continue uninterrupted.
