Amazon have issued three warnings this month about phishing and account security along with the vital advice on how to contact Selling Partner Support when you discover you have a locked Amazon Account and can’t even log in.
First up was a warning about phishing where someone attempts to steal your credentials, which if successful will lead to a locked Amazon Account. You might not be able to get in as the phisher will change your passwords and other information but they will!
“Recently, we have seen an increase in fraudulent emails, circulated in order to collect private information from both customers and sellers. Such emails (known as “phishing” or “spoof” emails) often come with the request to update personal, financial or other account data. Alleged notifications might also contain another call to action (for example, “you have received a customer review, please login”). Amazon has zero tolerance for fraud, and we would like to draw your attention to the following safety measures.
Phishing is an attempt to steal your confidential information such as your user name, password, or One Time Password via an email or other direct communication. A fraudster can fake sender information, tricking you into believing the message is from Amazon, while directing you to another website designed to steal your account information. Amazon takes this issue very seriously. To make it easy to identify phishing attempts, we will never request to update payment information through a link in the email. Instead, we would include instructions on how to verify your account information, including payment options, through the respective Amazon website. You can check the web address to ensure the site is legitimate before entering your information.”
How to identify phishing emails
If you would like to check the full list of valid Amazon send-from addresses they’ve a help page on their website.
Amazon advice to identify phishing emails includes checking for the following characteristics
- Look for the sender. There may be “Amazon” as a sender in the email, but if you click on the sender, you can view the details and will see the complete email address.
- Phishing emails often contain spelling or grammatical errors. This is a clear sign of fraud.
- Do not click directly on any link in the email but enter the URL in your browser. Check closely the URL of the page. Often, bogus websites contain small spelling mistakes that might not stand out in the URL (for example, “amzon”).
- Amazon will never send emails asking you to confirm your data and enter passwords.
- Look for your own email address. Amazon sends all messages exclusively to the email address stored in your seller account.
Keep an eye out for One Time Passwords you did not request
The second advice Amazon published is that if you receive a One Time Password sent to your Two-Step Verification enabled device and you are not actively logging in to Amazon, reset your password immediately and review your account for any other unauthorised changes. If you cannot access your account anymore, you can recover your account here.
Before you begin account recovery, do the following:
- Try to sign in with a registered backup method or from a trusted device.
- If successful, review your primary phone number.
- Check that the authenticator app is enabled on your account.
If you have a Locked Amazon Account follow these steps
Finally, Amazon told merchants what to do if you experience a login issue and have a locked Amazon Account:
- Verify that you are using the correct email address and password combination.
- Ensure that there are no extra spaces in your password. This can happen when you copy and paste your password.
- If you are prompted to enter a Two-Step Verification code, verify that you entered the most recent code you received; older codes will not work. For more information, see Two-Step Verification FAQ.
- Clear your browser cookies and cache, or try logging in with a different browser or device.
- Use the Amazon password assistance page to verify whether the email address you are using is the one registered in Amazon’s system.
- Log in to Seller Central using your new email address and password combination.
If the above steps do not resolve the login issue, contact Selling Partner Support using this form and describe your issue in detail.