Charged For Amazon I Didn't Order

[judgediatl2]

Ohio

I've had a weird occurrence involving my Amazon account the last week or so. First, a package with two items arrived that I didn't order. A set of flags and a pack of moth strips.

When I looked on my account, my card was charged and I did receive those (even though I have no clue where they came from). I 100% did not even search these, let alone order them.

I also notice there was a larger order placed before that, with these two items and three others (for a total of five). But it was canceled. Also have no clue about these.

Tried to call Amazon customer support, got some overseas guy who said they would escalate it to their "team" that would research it and get back to me. And of course I never heard from them.

Anyone know what the hells going on here? I thought it was a "brushing" scam, but I don't think that involves actually getting charged. And my wife and I are very secure with our logins, and there is no reason to assume anyone would have them.

 

[AlmostThere]

Change your logins. You have been hacked.

 

[quincy]

Ohio
And my wife and I are very secure with our logins, and there is no reason to assume anyone would have them.

I can think of at least one reason to assume someone might have your logins. Moth strips and tiny American flags were charged to your account without your knowledge or authorization.

You can dispute the charge with your bank, request new bank cards, and change all of your passwords. You can also ask Amazon to send you a “postage paid/return to sender” label so you can send the unwanted items back.

 

[adjusterjack]

Anyone know what the hells going on here?

Try this email address.

[email protected]

It may result in a corporate contact.

If that's no help, email one of the corporate executives. Somebody with corporate clout should be able to figure it out.

Primary Contact
Candi Castleberry-Singleton
Vice President of Inclusive eXperiences Technology (IXT)
410 Terry Avenue North
Seattle, WA 98109
[email protected]

Secondary Contact
Doug Herrington
Chief Executive Officer, Worldwide Amazon Stores
410 Terry Avenue North
Seattle, WA 98109
[email protected]

 

[Taxing Matters]

No clue for sure what's happened and even if Amazon cancels all the orders I agree with the others that it's a good idea to update your passwords.

The computer security specialist I consulted for my firm told me it's a very good practice to change your login passwords at least once every six months even without any signs of a problem. That can be a bit annoying, but the time I spend doing time that is a lot less than I'd spend trying to fix my accounts if some crook were to get access to them.

The expert also said it's a very a good idea to set up either multi-factor logins or biometric logins on those sites that offer it. In plain English, the mutli-factor login means that in addition to your password you have a second method to verify it's really you trying to login. Often that's sending you a code by e-mail or text that you then type in at the next screen of the site. The idea is that its far less likely that some con artist has access to both those methods and will stop a con artist who only has one of them from impersonating you to carry out the fraud.

The biometric methods are the finger-print and facial recognition security methods that Apple, Google, Microsoft and other major tech firms now offer. The biometric information is stored locally on your own device. Your device verifies its you and then a code is provided to store, website, or whatever that it is indeed you. That's another safety precaution and also provides you more flexibility at the same time.

For example, I use Apple's facial recognition and fingerprint verification system. That information is stored locally on my iPhone, iPad, Mac, etc.. That provides three advantages. First, it means that unless the crook has physical control of my equipment it is impossible for the crook to get access to my accounts. Second, by having it stored locally on my devices the system works even if I don't have internet access. Third, I don't have to deal with passwords. Even if the crook gets my phone they have to still somehow fake my fingerprint. The biometric account login systems of other tech companies work much the same way.

The benefit of these methods is pretty obvious: a con artist isn't going to be able to provide a match for your fingerprint or your face. For the fingerprints the expert suggested to me that I set it up with several fingerprints, at least one on each hand. The reason if something happens to one finger or hand that prevents me from using the fingerprint sensor I'll still have access to my accounts by using one of my other fingers that are not injured for sensor pad. For facial recognition systems, you may need to update it if your facial appearance changes in some significant way.

Unfortunately, we have to keep updating our security practices to stay a step ahead of the criminals trying to steal your information or hack into your accounts. That's just the world we live in today.

 

[quincy]

My bank offers a notification feature that texts me every time my card is used, immediately after a charge is presented for payment. At holiday times it can make for a lot of texts but it is a great early warning system.

judgediatl2, you might want to check to see if your bank offers something similar.

 

[judgediatl2]

I've started the process directly with their security team (was finally able to get ahold of someone).

Does anyone know if there is a way for me to see a list of log-in locations of where my Amazon account was accessed from? I checked, but it only shows where the apps are installed on my phone and tablet.

I need city/state info saying when and where the account was used (which other apps do provide).

 

[quincy]

I've started the process directly with their security team (was finally able to get ahold of someone).

Does anyone know if there is a way for me to see a list of log-in locations of where my Amazon account was accessed from? I checked, but it only shows where the apps are installed on my phone and tablet.

I need city/state info saying when and where the account was used (which other apps do provide).

There is almost always a way to find almost any information you seek. But it can require subpoenas and it could get costly.

Do you know anyone (friend, acquaintance) who might have accessed your information? Or are you confident it was an unknown online hacker?

 

[AlmostThere]

I've started the process directly with their security team (was finally able to get ahold of someone).

Does anyone know if there is a way for me to see a list of log-in locations of where my Amazon account was accessed from? I checked, but it only shows where the apps are installed on my phone and tablet.

I need city/state info saying when and where the account was used (which other apps do provide).

It is more important to change your password and set up 2FA on your account..

 

[quincy]

It is more important to change your password and set up 2FA on your account..

Especially since the hacker could be overseas.