Prize Notification Scams on Amazon
Fraudsters impersonate Amazon via emails, SMS, and fake pages claiming buyers have won a prize or reward, then extract payment card details or personal data through the claim process.
Part of: Prize Notification Scams
Last reviewed: 1 June 2026
Amazon's large customer base makes it a prime impersonation target for prize notification scams. Fraudulent emails and fake Amazon-branded websites announce that the recipient has been selected as a special customer winner of a gift card, electronics prize, or loyalty reward, and direct them to claim via a page that harvests their login credentials or card details.
Because Amazon does run genuine loyalty programmes and promotional giveaways, customers are primed to find prize notifications plausible — especially when the design and language closely mirror real Amazon communications.
How this scam works on Amazon
A phishing email styled as an Amazon notification announces a prize draw win. The recipient is directed to an Amazon-looking page to 'verify their identity' and claim the prize. The page captures login credentials, payment card details, and in some cases, the victim's full ID.
Some variants operate through fake Amazon marketplace listings — a listing offers a product for a nominal price but the checkout page redirects to a phishing site requesting card details. Others deliver pop-up prize notifications when the victim visits the genuine Amazon site from a compromised device.
Some prize notification pages add the Amazon Prime logo and describe the prize as exclusive to Prime members, increasing the perceived legitimacy for subscribers.
Common red flags
- Email claiming you have won an Amazon prize that directs you to a non-Amazon URL
- Checkout page that requests card details beyond what Amazon's standard payment flow requires
- Prize claim process that asks for your Amazon password outside of the official login page
- Pop-up on your browser claiming you have won an Amazon reward
- Prize framed as exclusive to Amazon Prime members to add legitimacy
How to protect yourself
- Access your Amazon account only by typing amazon.com (or your regional equivalent) directly into your browser
- Check your Amazon account's notifications and messages section for any genuine prize activity — not via email links
- Never enter your Amazon password on any page reached through an email link
- Enable Amazon's two-step verification to protect your account
- Report phishing emails claiming to be from Amazon via Amazon's dedicated phishing report address
How to report it
- Forward phishing emails to Amazon's phishing report email address listed on Amazon's official help pages
- Report the phishing website to your national cybercrime authority
- Change your Amazon password and check for unrecognised orders if credentials were entered
Frequently asked questions
How does Amazon actually notify genuine winners of promotions?
Amazon notifies genuine winners through messages visible within your Amazon account under 'Your Messages' — accessible only after logging in on the official site. Genuine prize notifications do not require you to re-enter card details or visit third-party sites.