"Amazon Prime Membership Cancelled" E-Mail Scam - Remove It
THREAT REMOVAL

“Amazon Prime Membership Cancelled” E-mail Scam – Remove It

This article has been created to help explain what exactly is the Amazon Prime Membership scam and how you can block it on your e-mail plus remove any software that may be causing such e-mails to arrive in your Inbox.

A new wave of scam e-mails was recently detected by security researchers. The e-mail scam was reported to perform multiple types of convincing tactics in order to lead users to a phishing website, which asks them to sign in to Amazon. The result of this is that users may be lured into typing their username and password and hence give hackers access to their accounts. Many reports have indicated that cyber-criminals may have immediately begun to make purchases and other activities on affected account. If you have problems on your computer as a result of the Amazon Prime Membership e-mail scam, we recommend that you read this article thoroughly.

Threat Summary

Name"Amazon Prime Membership Cancelled" Scam
TypeE-Mail Scam / Unwanted Software
Short DescriptionVictims may start to receive multiple different e-mails or the may become redirected to web pages that ask them to login to their Amazon accounts..
SymptomsYour web browser begins to display various types of online advertisements, which results in slowing down of your PC.
Distribution MethodVia e-mail or a potentially unwanted software(PUP).
Detection Tool See If Your System Has Been Affected by "Amazon Prime Membership Cancelled" Scam

Download

Malware Removal Tool

User ExperienceJoin Our Forum to Discuss "Amazon Prime Membership Cancelled" Scam.

Amazon Prime Membership E-mail Scam – Spread

The primary method used to scam victims with this scheme is via e-mail. What usually happens is you receive an e-mail that contains the following message:

Mon 2.25.2019 16:30 PM
Amazon Prime membership cancelled!
To
Bing Maps + Get more apps
Hello from Amazon.com,
As you requested, we’ve cancelled your Amazon Prime membership.
Since you have not used your Amazon Prime benefits, we are refunding $99 which indudes full
membership fee and any applicable fees and taxes. Your refund should be processed within the
next 2-3 business days and will appear as a credit on your card’s next billing statement. If your
latest membership charge is still processing, we’ll issue the refund as soon as the charge is
completed.
If you’d like to join Amazon Prime again, start a paid membership by signing-up during checkout
or visiting the Amazon Prime page: www.amazon.com/prime {FAKE ADDRESS}

Thank you for trying Amazon Prime and shopping at Amazon.com.
Best regards,
Amazon.com Customer Service
® Amazon.com, Inc. or its affiliates. All rights reserved. Amazon. Amazon.com, Prime, the Amazon.com loga and 1-Click are
registered trademarks of Amazon.com, Inc. or its affiliates. Amazon.com. 410 Terry Avenue N.. Seattle, WA 98109-5210.

The URL which was reported in connection to those e-mails, believed to be www.amazon.com/prime, actually leads to a fake web page, which unfortunately aims to pretend to be the real amazon Log-in page as reported by researcher Michael Gillespie who found the phishing domain hidden behind a fake URL:

In addition to this, the web page itself may also be spread via other methods besides e-mail as well. One of those methods is if you have had an adware or a potentially unwanted software to be directly installed on your computer as a result of software bundnling. Such adware applications often cause the following ads:

  • Browser redirects.
  • Pop-ups.
  • Ad-supported search results.
  • Fake e-mails or Push notifications.

All of those advertisements may eventually lead you to the fake login web page of this phishing scam.

Usually, such unwanted programs also slow down your computer and you see multiple ads and changed settings of your browser as well as changed home pages. So if you happen to experience those symptoms, you might want to check your system for malware as well, preferrably by using the information further down below in this article.

Amazon Prime Membership E-Mail Scam – Analysis

The Amazon Prime Membership Scam begins by user having to click or be redirected on the phishing URL. Phishing is essentially faking a web page to resemble an original one, with the purpose to trick you into typing in your personal information or other details that are sensitive.

The web page to which the fake Amazon Prime URL may lead you to is the following:

One interesting thing is that the web page, not only uses tracking to tell your real IP address, but also checks if you are a real person or no, using Captcha check. We do believe that this is done with the main purpose behind it being to disallow any crawlers to detect the web page is phishing and report it to security researchers. Once the Captcha is completed, users are taken to the following web page:

The dangers of typing in your Amazon User Name and Password on the fake page are multiple, among which the main are:

  • The crooks may immediately used saved information on your computer to make purchases.
  • Your personal information may be exposed.
  • Scripts on the site may infect your computer with malware.

Either way, it is best to stay safe and check and remove any malware that may already have compromised your computer or may have led it to the Amazon Prime Membership cancelled Phishing scam.

Remove Amazon Prime Membership E-Mail Scam

If you want to remove this scam and stop seeing it ever again, we suggest you to first secure your system, before making any protection changes. You can do this either manually or automatically by following the removal instructions listed underneath this post. For maximum effectivness and ease of use, we recommend that you perform a scan of your computer using an advanced anti-malware software. This program will effectively detect and remove any adware and other unwnated software in the events that it causes the Amazon Log-in pop-ups on your computer.

If you want to protect your e-mail against any privacy-invasive and phishing messages, we recommend that you read the following article:

Related:
Since fake e-mails containing malicious attachments are very popular amongst malware authors because of most users infected via this method, we have decided to provide few useful protection tips. These tips will not make you 100% impenetrable against becoming infected,...Read more
Protect Yourself from Getting Infected by Malicious E-mails

Ventsislav Krastev

Ventsislav has been covering the latest malware, software and newest tech developments at SensorsTechForum for 3 years now. He started out as a network administrator. Having graduated Marketing as well, Ventsislav also has passion for discovery of new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management and then Network Administration, he found his passion within cybersecrurity and is a strong believer in basic education of every user towards online safety.

More Posts - Website

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...