About Identifying Whether an E-mail, Phone Call, Text Message or Webpage is from Amazon

If you receive a suspicious (sometimes called phishing) correspondence, here are some tips to determine if it's an e-mail, phone call, text message or webpage from Amazon.com.au.

Important: Email

Don't open any attachments or click any links from suspicious e-mails. If you've already opened an attachment or clicked a suspicious link, go to Protect Your System.

What are the differences between Amazon.com.au emails & suspicious emails?

Amazon.com.au Emails Suspicious Emails
  • Never ask you to reply with personal information (except when replying to you, if we haven't identified you).
  • We collect personal information through the Amazon website.
Requests things like:
  • Your credit card number, PIN number, or credit card security code (including "updates" to any of the above)
  • Your mother's maiden name
  • Your Amazon username or password

Provide instructions on how to verify account information through the Amazon.com.au website.

Ask you to verify account information through a link in the e-mail.
Are proofread. Spelling and grammar mistakes aren't common. Multiple spelling and/or grammar mistakes.

Only link to sites that begin with "http://"something".amazon.com or amazon.com.au".

Legitimate sites have a period before "amazon.com or amazon.com.au".

Sites such as "payments-amazon.com" (they are not actually Amazon).

Use an IP address (string of numbers) followed by directories, such as "http://123.456.789.123/amazon.com/".

Don't contain unsolicited attachments or requests to download software. Attach files to open that you weren't expecting, or ask you to download software.


  • If the message is an order confirmation, look in Your Orders and see if there is an order that matches the details for the one in the e-mail. If it doesn't match an order, the message isn't from Amazon.
  • If the message asks you to update your payment method, go to Your Account and click Manage Payment Options in the Payment section. If you aren't prompted to update your payment method on that screen, the message isn't from Amazon.
  • Suspicious e-mails may contain forged email addresses to make it look like the e-mail is coming from Amazon.com.au. If the "from" line of the email contains an Internet Service Provider (ISP) other than @amazon.com.au, then it's a fraudulent email.
Important: Phone Calls

While some departments at Amazon will make outbound calls to customers, Amazon will never ask customers to disclose or verify their Amazon.com.au password, credit card, or banking account number. If you receive a phone call asking you to disclose the above information, please report it.

Learn how to Report & Handle Suspicious Emails and Phone calls and Protect Your System.

Was this information helpful?

Thank you for your feedback.

Please select what best describes the information:

Thanks! While we're unable to respond directly to your feedback, we'll use this information to improve our online Help.