Analysis of a Scam Text Message

An Analysis of a Scam Text Message

Apparently, a relatively new scam is coming to cell phones across the country.

A message purporting to be from Amazon, warning that a product that was recently ordered has been "identified as a product safety recall item". The message provides a vague date, an order #, and a link where more information can be found about the recall, and a refund can be requested. 

Let's take a look at the actual message:

Scam message part 1  Scam message part 2

Now let's take a closer look ...

 Scam message analysis 2

Here are some red flags which are highlighted above:

1. There were 17 people included on this text. 
If this is a warning to ME, regarding MY order, why are 16 other people also being notified?

2. Amazon knows my name
If this is truly from Amazon, wouldn't their system be sophisticated enough to address the message to me by name?

3. Order date vague
Again, Amazon should know the specific date the order was placed.

4. Order number looks legit
The order number is in the correct format of an Amazon order, BUT see point #1

5.  Suspicious URL
Amazon does use shortened URL's, but they are generally recognizable as belonging to Amazon.

Further investigation

1. I did click the link and it goes to a legit looking Amazon login page. The URL however is anything but legit - https://pbfy.fmjzqs.top. I did NOT enter my Amazon login info.

2. I checked the email account that I use with Amazon. No notifications.

3. I logged in to my Amazon account. This order # did not exist in my list of orders in January. Again the format was correct and the numbers were close, but no cigar.

4. I verified that Amazon doesn't communicate product safety recalls via text.

Amazon notifies you of recalls through personalized emails, alerts on your "Your Orders" page, and a dedicated "Your Recalls and Product Safety Alerts" page in your account, providing details, instructions, and options like refunds or returns for items you've purchased, but always verify alerts by checking your account directly, not through links in suspicious texts or emails. 

If you receive a similar text from Amazon or another vendor, never call the number or click the link provided. Always check your email for notifications and/or login to your account with that vendor.

If you have any questions, please contact the IT Help Desk at 573.651.4357 or helpdesk@semo.edu.