Amazon Issues Black Friday Cyberattack Alert: 300 Million Customers at Risk

Amazon Sounds the Alarm: Black Friday Brings a Surge in Cyber Threats

Black Friday—once a simple rush for bargains—has become a digital battleground. As millions of shoppers log on in search of deals, Amazon, the world’s largest online retailer, is warning its massive user base of 310 million: cybercriminals are waiting in the wings, and the risks this year are higher than ever.

On November 24, Amazon sent out an urgent email to its customers. The message was clear and unmistakable—stay alert, because hackers and scammers are ramping up their efforts to steal personal and financial information. This warning isn’t just a routine reminder. According to Live Mint and Mirror, the threat landscape has changed: the volume, sophistication, and speed of cybercrime attempts have all surged, particularly as Black Friday approaches.

How the Scams Work: New Tricks for a New Era

Cybercriminals are no longer satisfied with poorly written phishing emails. Instead, they’re deploying a host of new tactics, many powered by artificial intelligence. These range from convincingly forged order confirmations to fake customer service messages, all designed to coax users into revealing sensitive information.

Common attack vectors include:

• Fake delivery messages: Emails or texts claim there’s a problem with your Amazon order, prompting you to click a suspicious link or share account details.
• Deceptive advertising: Slick ads—sometimes on social media—offer deals that seem too good to be true, luring shoppers to phishing websites.
• Unofficial requests: Messages via email, text, or even unsolicited phone calls ask for payment info, passwords, or urge you to verify your account.
• Spoofed websites: Cybercriminals register domain names resembling Amazon or Black Friday sales, hoping hurried shoppers won’t spot the subtle misspellings.

According to a recent FortiGuard Labs report, over 19,000 domains mimicking retail giants like Amazon have been registered in the past three months alone. Of these, nearly 3,000 are confirmed malicious, and many are tied directly to the holiday shopping season. Even seasoned internet users can be caught off-guard when the pressure to snag a deal is high.

The Scale of the Threat: Numbers Tell the Story

This isn’t just theory. The numbers paint a sobering picture:

• 310 million active Amazon customers worldwide in 2025.
• 18,000+ holiday-themed domains registered recently, with at least 750 found to be malicious.
• 19,000+ domains impersonating major brands, including Amazon, with 2,900 confirmed as cyber traps (FortiGuard Labs).

“Cybercriminals are constantly evolving their tactics,” said Anne Cutler, a security expert at Keeper Security. “With the help of AI, these scams are more believable and harder to spot than ever before.”

Amazon’s Security Playbook: How to Stay Safe

In its customer alert, Amazon laid out a series of practical steps every user should take—not just during Black Friday, but all year round:

• Stick to Official Channels: Only use the Amazon mobile app or website for shopping, customer service, delivery tracking, and refunds. Never trust links sent via email or text, no matter how convincing they appear.
• Enable Two-Factor Authentication: Adding this extra layer of security makes it far more difficult for thieves to access your account, even if your password is compromised.
• Switch to a Passkey: Amazon now supports passkey sign-in, which uses biometrics or device PINs—making it much harder for hackers to break in.
• Know Amazon’s Policies: The company will never ask for payment details, passwords, or gift card information over the phone. Nor will it ever send emails asking you to verify your account credentials.
• Don’t Fall for Urgency: Scammers often try to pressure you with urgent demands. Take a moment to verify any suspicious message before you act.

Amazon’s recommendations are echoed by cybersecurity experts worldwide. Taking a few extra seconds to double-check a message or website can mean the difference between a successful shopping spree and falling victim to fraud.

Why This Year Is Different: The AI Factor

One of the most alarming developments is the use of artificial intelligence to craft more convincing scams. AI-generated emails can closely mimic Amazon’s own communications, and some fraudsters even create deepfake customer service agents. This technology blurs the line between real and fake, making vigilance even more important.

The stakes are high, especially as the holiday season ramps up. “It’s not just about losing money,” says Cutler. “Your identity, privacy, and even your peace of mind are at risk.”

What to Do If You Suspect a Scam

If you receive a suspicious message or call claiming to be from Amazon:

• Do not click any links or provide information.
• Report the message to Amazon using their official website or app.
• Change your password immediately if you think your account details may have been compromised.
• Contact your bank if you’ve shared financial information.

Amazon has dedicated teams monitoring for fraudulent activity and can help restore compromised accounts—but prevention is always the best defense.

Final Thoughts: A Season for Caution, Not Fear

For millions, Black Friday is a chance to find great deals and get a jump on holiday shopping. But as the sales heat up, so too does the risk from cyber threats. Amazon’s proactive warning is a sign of the times: shopping online is convenient, but it demands vigilance. The best defense is a healthy dose of skepticism and a commitment to the security basics.

While the scale and sophistication of cyber threats this year are unprecedented, the tools and knowledge to stay safe are within every shopper’s reach. Amazon’s transparent communication and actionable advice empower customers to enjoy the sales season securely. Ultimately, the lesson is clear: in the digital marketplace, caution is the new common sense.