Amazon Product Recall Hack Attack Targets March Buyers

Did you buy anything from Amazon during the month of March? If the answer is yes, then this warning is very much for you. Hackers love all big brands, as any Gmail or WhatsApp user should be well aware. Amazon, however, is also right up there as a primary target for those looking to fool you into handing over account credentials. Indeed, I reported about a very similar Amazon attack campaign as recently as February 18.

The latest Amazon account-hacking campaign takes the form of a bogus email purporting to come from Amazon support, warning the user that a product they purchased in March 2026 has been recalled on safety grounds. This is a common tactic used by attackers to impersonate the Amazon brand, and it’s important to be cautious because it can be quite dangerous.

“We are writing to inform you of a product recall affecting an item from your March 2026 order, due to a design defect which may present a potential safety risk,” the email states.

Shrewd readers will note that it does not specify the actual product itself, which is the first red flag. What the email does do, however, is use urgency (“discontinue use of the product immediately”) alongside financial temptation (“receive a complete refund”) to tempt the recipient into clicking the order review link. That’s the second red flag: the link is presented in a URL-shortening service format, rather than being to Amazon itself.

The campaign itself is likely not highly targeted but rather is just using a spray-and-pray tactic, hoping that the email drops into enough Amazon customers’ inboxes, which is a fair bet given the number of us who use it, and have purchased something in the previous month.

I have reached out to Amazon for a statement regarding this specific threat campaign, but to stay safe, I would suggest taking note of existing Amazon impersonation scam mitigation advice: Only use the Amazon mobile app or website for customer service, account changes, delivery tracking, and refunds.