Amazon email phishing scam?

[GregK2]

Like most, I've been ordering a few things recently from Amazon, the latest turned up 2 days ago. No outstanding orders.
They have my address correct in the email. I can still access my account (Not using the link in the email) And nothing appears in the outstanding or cancelled orders.

What do we think?



Clicking verify my information brings up:

[DoctorX]

That's not the sign in screen I get, and the URL is different too. Phishy.

[GregK2]

I didn't think Amazon would ever ask you to log into your account via an email.
I've had a load of Paypal phishing scams lately which are hilariously obvious, this one is quite well done though.

[GOG440]

The most basic thing they have got wrong is it says the email is from amazon.com not amazon.co.uk.

[GregK2]

That's true. Well i've forwarded the email to [e-mail]

[964Cup]

The original email is not from an Amazon address.

The link you followed (never do that) goes to a dummy URL; it includes the words "SSL" but isn't actually certified or encrypted, and the actual domain is "verisigns.co" which is trying to look like Verisign, but obviously isn't. In any case, Amazon would always use an Amazon.co.uk or Amazon.com domain.

Therefore, phishing.

More here: http://blog.rappidly.com/2015/09/28/6-rules-to-avo...

[turbobloke]

I've bought from Amazon but haven't as yet received this spear phishing message. The phishing attempts I do get are easy enough to spot, being generic and telling me of suspected fraud or unusual activity or suspended ID / accounts for Apple, FaceBook, Twitter, PayPal and some American banks - the telltale giveaway massive clue is that I don't have and never have had accounts with any of the above.