Fake Amazon email claims unusual activity has placed account temporarily on hold

What is this scam?

Phishing emails impersonating Amazon use accurate logos and branding to tell recipients that unusual activity has been detected on their account, which has been placed temporarily on hold. A link leads to a convincing copycat Amazon website designed to steal login credentials, personal details, and payment card information. Which? flagged this as an active scam in July 2026. Amazon does not send unsolicited emails about account holds with embedded login links — any genuine security notification would direct you to log in independently at amazon.co.uk.

Example scam message

Red flags to look out for

• The message creates urgency — threatening a fine, missed delivery, or account closure.
• Links lead to unofficial domains that don't match the real company's website.
• You weren't expecting this message and can't verify the event it references.
• It asks you to confirm payment details or personal information via a link.
• The sender's number or email address doesn't match the company's official contact.

What to do if you receive this

1. Do not call any numbers or click any links in the message.
2. Log in to your account directly via the official website or app to check for any real alerts.
3. Forward the message to 7726 or email report@phishing.gov.uk.
4. Report it to Action Fraud at actionfraud.police.uk.