Amazon account hacked

Deathwish · 18 Apr 2016 at 13:57

Matteh said:
It has it - enable it through amazon.com and it applies to your .co.uk account

Ah magic, thank you kind sir

Outcast · 18 Apr 2016 at 14:20

Cracker Phail

Shoulda bought two !

In for a Penny, In for a pound

Matteh · 18 Apr 2016 at 14:45

andicole0 said:
Does two step mean I get an SMS every time I log in to Amazon? Or just my account settings?
Andi.

I don't get an SMS every time I log in no, regardless of if I've set the device to be remembered or not. Are you using SMS to send the code as I use the Google authentication app so may be different I guess?

Pawnless Endgame · 18 Apr 2016 at 16:32

Well since the scrote has added his address to your list of dispatch addresses, he has essentially outed himself. Get onto the police now with his address.

tom_e · 18 Apr 2016 at 16:35

Matteh said:
I don't get an SMS every time I log in no, regardless of if I've set the device to be remembered or not. Are you using SMS to send the code as I use the Google authentication app so may be different I guess?

Well obviously if you're set up to use an authentication app rather than SMS auth you won't get an SMS everytime you log in

Pawnless Endgame said:
Well since the scrote has added his address to your list of dispatch addresses, he has essentially outed himself. Get onto the police now with his address.

It almost certainly won't be their actual address.

The_Abyss · 18 Apr 2016 at 16:53

tom_e said:
It almost certainly won't be their actual address.

But it could be. Some people are incredibly stupid.

uvarvu · 18 Apr 2016 at 16:59

What I don't get is that Amazon asks you to re-verify your card details whenever a new address is added. What happened in this case? Were the card details already known by the hacker?

tom_e · 18 Apr 2016 at 17:01

uvarvu said:
What I don't get is that Amazon asks you to re-verify your card details whenever a new address is added. What happened in this case? Were the card details already known by the hacker?

I think the scam is they talk Amazon CS into changing the delivery address so it doesn't go through the usual check as the order has already been placed.

Matteh · 18 Apr 2016 at 17:03

tom_e said:
Well obviously if you're set up to use an authentication app rather than SMS auth you won't get an SMS everytime you log in

Well, no, obviously - I wasn't sure if the suggestion was you get a message on every login informing you your account has been accessed...

uvarvu · 18 Apr 2016 at 17:06

tom_e said:
I think the scam is they talk Amazon CS into changing the delivery address so it doesn't go through the usual check as the order has already been placed.

Wow, that's a pretty serious security lapse and I hope that loophole is shut down. Does that mean the OP received an order confirmation to one of his addresses before the hacker called to change the address?

UTmaniac · 18 Apr 2016 at 17:48

I blame Wiggle.

Pawnless Endgame · 18 Apr 2016 at 18:25

tom_e said:
It almost certainly won't be their actual address.

Would they be sending the high-end graphics card to a relative's address instead? I think the police would still be interested, and that it would lead them to the culprit.

UTmaniac said:
I blame Wiggle.

Don't stop wiggle wiggle!

abdidas · 18 Apr 2016 at 18:32

What if there was a glitch in the amazon system which somehow gave him access to your account. I am pretty sure that happened before, or am I dreaming.

teenwolf · 18 Apr 2016 at 18:34

im putting money on the guy in cardiff is the OP's mate

Psypher5 · 18 Apr 2016 at 18:40

give address etc to the police, see if they can do anything too?

oulton · 19 Apr 2016 at 08:37

teenwolf said:
im putting money on the guy in cardiff is the OP's mate

What has happened in my opinion is that the theif has somehow managed to get hold of a database of amazon orders. Then has phoned up or used chat pretending to be me and complained that the item is faulty, and amazon have sent him a replacement expecting a return. |It could be some kind of stolen to order scam going on with ebay or the likes.

tom_e · 19 Apr 2016 at 08:40

Pawnless Endgame said:
Would they be sending the high-end graphics card to a relative's address instead? I think the police would still be interested, and that it would lead them to the culprit.

Don't stop wiggle wiggle!

It could be a totally innocent person and they're hoping to intercept the delivery, it could be an address used purely for this sort of scam with no ties to anyone, it could be someone who's bought something from the scammer and they're using Amazon to supply it, it could be the scammers or it could be his great gran.

It's worth a quick call to the police/action fraud but most of these guys aren't daft.

mysticsniper · 19 Apr 2016 at 08:46

Blackjack Davy said:
Did anyone else get an email from Amazon saying they'd need to reset their password? Seems they are aware there is a problem.

How do you know that really came from Amazon and wasn't a phishing email?

Personally I would be changing all my passwords on all accounts, email etc. Assume they have everything

HAz · 19 Apr 2016 at 09:09

Some scummer did this to me last week with next directory, I had a catalogue turn up the other day and they said I could keep it as a good will gesture

Great..... Got my money back though.

Resident · 19 Apr 2016 at 16:15

Kemik said:
Google - this happens quite often with Amazon. It's fairly easy for someone who knows your name and email to get access to your account by getting bits of information from their support via telephone and live chat. This then enables them to answer the security questions.

Surely that's a massive DPA issue if their support teams are giving out what should be secure information.