Amazon - was I hacked? Again?
Discussion
Sometime ago I had a major issue with Amazon. My account was locked - apparently "I" had ordered something using "My" credit card and "My" bank had rejected the transaction. I hadn't purchased anything for months and my bank said they hadn't had any disputed transactions on my CC. However it took 3 weeks and extended conversations with people in India before I got the account unlocked. I presumed I'd been hacked so changed my password and since then I have also had 2FA enabled.
Today whilst out I received a text from Amazon with a "One-Time-Pass" number (which they send me when I try to login, as part of their 2FA process). I can only think that somebody tried to login on my account and that they had hacked my password again.
When I got back to my desk there were two addresses that apparently had been "recently used", one in the Ukraine and one in the US, both with russian-sounding names. However nothing had been ordered and so I'm not sure how they were "recently used"
TL:DR if I've received a OTP code when its not me logging in have I been hacked? If so, is there anything I can do apart from change my password?
Thanks
ETA: I also appear to have a gift card balance of £16.10. I have no idea how that has got on there or how it's been part-used.
Today whilst out I received a text from Amazon with a "One-Time-Pass" number (which they send me when I try to login, as part of their 2FA process). I can only think that somebody tried to login on my account and that they had hacked my password again.
When I got back to my desk there were two addresses that apparently had been "recently used", one in the Ukraine and one in the US, both with russian-sounding names. However nothing had been ordered and so I'm not sure how they were "recently used"
TL:DR if I've received a OTP code when its not me logging in have I been hacked? If so, is there anything I can do apart from change my password?
Thanks
ETA: I also appear to have a gift card balance of £16.10. I have no idea how that has got on there or how it's been part-used.
Edited by Countdown on Friday 12th June 20:43
Horace Van Khute said:
Countdown said:
TL:DR if I've received a OTP code when its not me logging in have I been hacked?
Amazon does OTP codes through SMS? I thought you have to use authenticator app with them.mph999 said:
Could be worth getting something like a revolute card which allows a virtual card that you can just top up when you want to buy something online
I've got a separate 2FA on my credit card so that part isn't the issue. the first time it was hacked, it wasn't MY credit card they used. I assume they used somebody else's CC details, the other victim's bank made a chargeback claim to Amazon and then Amazon locked MY account.Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff