Amazon purchase triggers phishing
Amazon purchase triggers phishing
Author
Discussion

jimmydash

Original Poster:

288 posts

151 months

Sunday 22nd November 2020
quotequote all
The last few times, including today, after I’ve made a purchase on Amazon I get a phlshing email - any suggestions as to what the problem is. I am on Windows 10 and have full security supposedly.

xeny

5,516 posts

108 months

Sunday 22nd November 2020
quotequote all
Try purchasing from a different device and see if you get the email - that will at least narrow down if the Windows 10 computer is compromised or the problem is elsewhere.

Presumably the phish is to the same email account you're using with Amazon?

jimmydash

Original Poster:

288 posts

151 months

Sunday 22nd November 2020
quotequote all
Yes same email address that I use for Amazon. The senders email address is “masked” and looks as if it could be genuine but, without giving it away, there’s an obvious signal of its true nature. I’ve forwarded it to phishing at Amazon.

anonymous-user

84 months

Sunday 22nd November 2020
quotequote all
Stick the mouser pointer over the email address as it will highlight the real address behind it if it an alias.

jimmydash

Original Poster:

288 posts

151 months

Sunday 22nd November 2020
quotequote all
Doing that produces this ............................account.alert@locked-notification.com

NDA

25,732 posts

255 months

Sunday 22nd November 2020
quotequote all
jimmydash said:
Doing that produces this ............................account.alert@locked-notification.com
I get loads of Amazon, Apple and PayPal phishing mails. Just delete.

xeny

5,516 posts

108 months

Sunday 22nd November 2020
quotequote all
What is concerning me is how the phishing emails are getting triggered, presuming it isn't a coincidence.

If it's something malicious on the laptop then getting that machine trustworthy again is going to be a PITA.

OP - if the phish emails arrive immediately after you order something, can you place an order and then cancel it from a smartphone or tablet or similar? If that doesn't generate an email, then it seems likely it is your laptop.

When you say full security on the laptop - which browser are you using, and which AV package (to be honest I trust the built in one more than some of the 3rd party options at this point)?

NMNeil

5,860 posts

80 months

Sunday 22nd November 2020
quotequote all
Stop using Amazon. Plenty of other on-line retailers who don't collect your personal data.
https://www.investopedia.com/articles/insights/090...


jimmydash

Original Poster:

288 posts

151 months

Sunday 22nd November 2020
quotequote all
It’s not a coincidence. I’m on chrome, windows 10 and Advanced System Care.

NMNeil

5,860 posts

80 months

Sunday 22nd November 2020
quotequote all
And NDA, Apple and PayPal are no different.
If there's a dollar to be made....
https://appleinsider.com/articles/20/02/10/more-em...
https://www.schneier.com/blog/archives/2018/03/the...

xeny

5,516 posts

108 months

Sunday 22nd November 2020
quotequote all
jimmydash said:
It’s not a coincidence. I’m on chrome, windows 10 and Advanced System Care.
Congratulations! - you've got a package I've not encountered before that lists AV last in its list of features and claims to support XP

https://www.iobit.com/en/recommend/ascfree.php

Can you try using the built in AV software to do a scan as a check the machine is clean?

The_Jackal

4,854 posts

227 months

Sunday 22nd November 2020
quotequote all
You dont have to be compromised to get phishing emails.
They are a part of modern life. Just learn to spot them easily. A lot of people cant.
Its nearly xmas anyway. Millions and millions will be sent out automatically.
You'll also get ones from Apple, Nespresso, DHL etc etc

xeny

5,516 posts

108 months

Monday 23rd November 2020
quotequote all
Agreed - they are a fact of life. If however the OP can trigger them on demand, then something more concerning is happening.

Taita

8,009 posts

233 months

Monday 23rd November 2020
quotequote all
Bij that crap AV, run Windows Defender.

MikeGTi

2,743 posts

231 months

Monday 23rd November 2020
quotequote all
I'd very much doubt that your Amazon purchases are triggering phishing emails in this way. And if it was it would be the first time that I've heard of it.

What's more likely happening is that you're getting these phishing emails as everyone is, and that when you buy something on Amazon and then check your emails the phishing email is getting pulled down from your mail server at the same time.

Best advice is to mark them as junk so your mail provider filters them better, and if you're worried reset your Amazon, email, and local passwords and implement MFA where you can.

TimmyMallett

3,198 posts

142 months

Monday 23rd November 2020
quotequote all
If you want to be really sure, and hopefully someone more technical than me will confirm or debunk...if the email address is spoofed, the actual email address is in the internet header, so in Outlook File>Properties then in the Internet headers section look for 'Return-Path' and that will give you the true email address. If it doesn't match up to the sender, bin it, but most email clients will show this in the email field.

Sheepshanks

41,232 posts

149 months

Monday 23rd November 2020
quotequote all
TimmyMallett said:
If you want to be really sure, and hopefully someone more technical than me will confirm or debunk...if the email address is spoofed, the actual email address is in the internet header, so in Outlook File>Properties then in the Internet headers section look for 'Return-Path' and that will give you the true email address. If it doesn't match up to the sender, bin it, but most email clients will show this in the email field.
He knows they're spoofed - he's just bothered by the coincidence (if it is just that) of timing.

It is remarkable how these things happen though - I've heard people say same of DVLA after buying road tax, and BT - indeed my FIL was caught by a BT one when he was in the middle of having line problems, so it didn;t seem out of place to him.

Condi

20,480 posts

201 months

Monday 23rd November 2020
quotequote all
Download and run Spybot S+D, and "immunise" your browser using the same program. That will look for any trojans and also protect against future threats and compromises to the browser.

If you use Chrome or the newer Windows Edge browsers I would also use Adblock and Ghostery extensions. These should prevent a lot of the tracking by 3rd parties as you go about the internet.


jimmydash

Original Poster:

288 posts

151 months

Monday 23rd November 2020
quotequote all
Thanks Condi - will do.

Hoppum

138 posts

128 months

Monday 23rd November 2020
quotequote all
Had a similar situation with Paypal, whenever I made a payment within an hour I'd get a phishing email claiming various issues with my Paypal account.

Ended up just making a new email account and disassociating my old one from my Paypal, that stopped them straight away. No triggered phishing emails to either account now.

Also worth checking https://haveibeenpwned.com/ to see if any of your account details have been exposed, especially if you use the same email address and password for multiple accounts.