Deepfake Voice Scam Impersonating Amazon Customer Service
Criminals use AI voice synthesis to impersonate Amazon customer service agents, calling victims about fraudulent orders or account security issues and extracting credentials, payment details, or remote device access.
Part of: Deepfake Voice Scams
Last reviewed: 8 June 2026
Amazon's customer service handles an enormous volume of contacts daily, making the brand a believable cover for an inbound customer-service call. AI voice synthesis now allows criminals to generate professional, natural-sounding calls at scale without human agents, dramatically reducing the cost and increasing the volume of these scams.
Amazon's own robocall-like service notifications — delivery confirmations, package tracking updates — have conditioned customers to accept automated calls from Amazon. This conditioning is exploited: a fake Amazon voice call about an unusual account activity or a large unauthorised purchase triggers the same compliance response as a genuine automated notification.
The calls are particularly dangerous when they combine voice synthesis with real-time credential harvesting: the fake agent triggers a genuine Amazon one-time password during the call and asks the victim to read it aloud, handing over an authenticated session token.
How this scam works on the Amazon brand
The call opens with an automated-sounding message that references the victim by name and describes a specific account event: a large purchase to an unfamiliar address, an unusual login from a new country, or a pending charge the victim must confirm. The AI voice then connects the victim to a 'senior Amazon account specialist' — in reality another AI voice or a human scammer.
The specialist asks the victim to verify their identity by providing their Amazon account PIN or the last four digits of their card on file. They then mention they are sending a verification code to the customer's phone and ask for it to be read back. This code is a genuine Amazon two-factor token triggered by the attacker — reading it out completes account takeover.
Alternatively, the fake specialist may convince the victim to install a 'Amazon Account Protection' tool — a remote access application — that gives the attacker direct access to the victim's device, banking apps, and file system.
Common red flags
- An unsolicited call from an apparent Amazon number describes an urgent account issue and asks for verification
- The caller asks you to read aloud a code just sent to your phone — genuine Amazon agents do not need you to do this
- The voice sounds professional and patient but lacks the natural imperfections of real conversation
- The caller asks you to install software to protect your account or resolve the issue
- You are told that confirming your card details will prevent an imminent charge being processed
- The caller urgently tells you not to end the call or log in to your account yourself to check
How to protect yourself
- Hang up on any unexpected call claiming to be Amazon and contact Amazon directly via amazon.com/help if you are concerned
- Never read a verification code aloud to any inbound caller — this is always a sign of account takeover in progress
- Enable Amazon two-step verification so that any session the attacker attempts to open using your credentials still requires a code only you should possess
- Never install software at the instruction of an inbound caller claiming to be Amazon
- Amazon's real customer service number can be found only at amazon.com/help — do not call numbers given to you in unsolicited calls
- If a call refers to a specific order or account event, verify by logging in directly at amazon.com
How to report it
- Report the scam call to Amazon at [email protected] and via the report option at amazon.com/help
- File a complaint with the FTC at reportfraud.ftc.gov
- Report the caller ID spoofing to the FCC at consumercomplaints.fcc.gov
- If remote access was granted, revoke it immediately, change your Amazon password, and run a malware scan on your device
Frequently asked questions
Does Amazon make outbound phone calls about account security?
Amazon may send automated package notifications but does not typically make unsolicited outbound calls asking you to verify account details or read out a security code. Treat any such call as suspicious.
What should I do if I read a code to the caller?
Assume your Amazon account is being actively accessed. Immediately change your password, revoke all sessions in Amazon account settings, and check for any orders placed or account changes made. Contact Amazon customer service and your bank if payment details were also shared.
How do I tell if an Amazon phone call is AI-generated?
AI voices are often perfectly cadenced. Ask an unexpected question — something about a product category or a callback number — and note whether the response is generic or delayed. Genuine agents handle unexpected questions naturally.