Amazon has issued a warning to its 200 million global Prime members over a spike in phishing scams ahead of its Prime Day sales event, running July 8–11.

The online retail giant says cybercriminals are ramping up efforts to steal personal and payment details by impersonating Amazon via fake emails, texts and phone calls.

The company detected an 80% spike in these scams during last year’s Prime Day and says similar activity has already begun this year.

The most common tactics involve messages claiming account issues, missed deliveries, or order problems – often with malicious links or urgent demands for personal details. Amazon stressed it will never ask for sensitive information like passwords, gift card numbers or one-time passcodes.

In 2024, Amazon removed over 55,000 phishing websites and 12,000 fraudulent phone numbers. Despite this, impersonation scams have surged, with payment fraud becoming the most reported scam type in 2025, now making up 38% of cases.

Users are urged to verify all communication directly through the Amazon app or website. Suspicious emails should be deleted immediately, and scam attempts reported via Amazon’s Help Centre.

To stay protected, Amazon recommends enabling two-factor authentication, avoiding password reuse, and never clicking on unfamiliar links. Customers can verify legitimate Amazon messages in the app’s Message Centre and check if products are sold and shipped directly by Amazon.