PhishFoe

Fake Amazon Return Requests

Your refund is pending — confirm your return address

Emails claiming to be from Amazon, stating that a return has been initiated or a refund is pending. They ask you to click a link to "confirm" your return address or payment method to receive the refund.

What to Watch For

  • Sender domain is not amazon.com or its verified subdomains
  • Reference to a purchase you didn't make or a return you didn't initiate
  • Link goes to a suspicious domain like "amazon-return-center.tk"
  • Asks for payment method details to "process" a refund

Examples

""Your Amazon refund of $134.99 is pending. To confirm your return shipping address and receive your refund, click here: amazon-refund-verify.tk""

Why it works: The promise of a refund triggers excitement. People who have shopped at Amazon recently are especially susceptible.

What to Do

Log in to your Amazon account directly to check order and return status. Amazon never asks you to confirm refund details by email. Check your actual order history at amazon.com.