Somone has hacked my Amazon account

[Noodle1982]

I set up an Amazon account about 6 years ago and have never used it. The last couple of days I've been having random emails from Amazon regarding attempts to sign into my account from Birmingham.

Logged on to check the account and everything seemed fine. The card which I had registered my Amazon account with all them years ago expired in 2018 but deleted it anyway.

Got up this morning and had an email stating that my order will be delivered today. Slightly confused I logged back on and sure enough an order had been placed and was being sent to some random guy in Wickham.

I clicked the payment methods on my account to see how this was carried out, as I had deleted my card detail the previous day, and turns out there's a random card now registered on my account. All very confusing.

Anyway, contacted Amazon and got my account deleted, checked with my bank and everything looks fine.

The email account I used for Amazon is the same account I use for everything else. I've got different passwords for all accounts but surely if they can crack one password they can crack them all?

[bitchstewie]

Make sure you have strong unique passwords for everything and make sure you have 2FA enabled anywhere you can do so.

Like your email and Amazon

[Teddy Lop]

Noodle1982 said:

I set up an Amazon account about 6 years ago and have never used it. The last couple of days I've been having random emails from Amazon regarding attempts to sign into my account from Birmingham.

Logged on to check the account and everything seemed fine. The card which I had registered my Amazon account with all them years ago expired in 2018 but deleted it anyway.

Got up this morning and had an email stating that my order will be delivered today. Slightly confused I logged back on and sure enough an order had been placed and was being sent to some random guy in Wickham.

I clicked the payment methods on my account to see how this was carried out, as I had deleted my card detail the previous day, and turns out there's a random card now registered on my account. All very confusing.

Anyway, contacted Amazon and got my account deleted, checked with my bank and everything looks fine.

The email account I used for Amazon is the same account I use for everything else. I've got different passwords for all accounts but surely if they can crack one password they can crack them all?

unless you have something easy its random chance, or these firms tend to have regular data breaches.

I guess its stolen card details, is there more security around new accounts than reregistering cards on old accounts?

[Noodle1982]

bhstewie said:

Make sure you have strong unique passwords for everything and make sure you have 2FA enabled anywhere you can do so.

Like your email and Amazon

2FA now enabled

[bitchstewie]

Noodle1982 said:

2FA now enabled

Use a password manager if you don't already have one.

Think of your email as the crown jewels because if someone can access that they can probably get at anything linked to it by clicking "forgot password".

Might be worth checking your computer too for malware.

Personally I'd use Gmail with 2FA and just use the web interface through Chrome.

[red_slr]

Will 2fa work with gmail on a mobile? I like the sound of it but can't see how it would work..

[bitchstewie]

red_slr said:

Will 2fa work with gmail on a mobile? I like the sound of it but can't see how it would work..

Same as on anything else it sends a notification to the phone.

Of course there's an assumption that you do sensible things like lock your phone with a strong PIN or biometric.

Which everyone does in 2021 right