Beware: Cybercriminals Posing as Amazon Business Officials to Scam You

Incident Overview

Recently, individuals claiming to represent Amazon Business initiated multiple calls to unsuspecting individuals, urging them to create an Amazon Business account. The operation appears to involve a large group, as background noise during the calls revealed multiple conversations, seemingly with other victims. Their modus operandi suggests a coordinated effort to obtain sensitive information under the guise of facilitating business transactions.

The scam unfolds as follows:

Modus Operandi

1. Initial Contact:
   • Victims receive unsolicited calls from individuals claiming to represent Amazon Business.
   •  The callers sound convincing, using professional terminology and emphasizing the benefits of creating an Amazon Business account.

1. Request for GST Number:
   • Victims are asked for their GST number, a crucial piece of information required to set up a business account.

• • This request is framed as part of a routine verification process to access exclusive business services.

ALSO READ : Nominate NOW for FCRF Excellence Awards at FutureCrime Summit 2025

1. Account Creation:
   • Once the GST number is shared, the victim is instructed to create an Amazon Business account immediately.
   • The callers offer step-by-step guidance to ensure compliance.
2. Screenshot Sharing:
   • After the account is created, victims are asked to share a screenshot of the account dashboard via WhatsApp or other messaging platforms.
   • This serves as a tactic to validate the victim’s compliance and potentially gain access to sensitive account details.
3. Email Forwarding Request:
   • Next, the scammers ask the victim to forward a specific email related to the account. This may involve emails containing verification links or other sensitive information, which could allow them unauthorized access to the account.
4. Collection of Personal/Financial Data:
   • Through the process, the scammers aim to collect critical information, such as:
     • GST number
     • Email addresses and associated passwords
     • Account details from the Amazon platform

ALSO READ : Honoring Excellence in Cyber Forensics and OSINT Innovation – [Nominations for FCRF Excellence Awards]

1. Malicious Use:
   • The collected information can be exploited for fraudulent activities, including:
     • Unauthorized transactions
     • Identity theft
     • Leveraging the victim’s GST details for illicit business dealings

Preventive Measures

• Verify Caller Authenticity: Always confirm the legitimacy of unsolicited calls by contacting Amazon Business directly through official channels.
• Avoid Sharing Sensitive Data: Do not disclose GST numbers, email credentials, or other personal details over the phone or messaging platforms without proper verification.
• Stay Vigilant: Background noise indicating a call center environment should raise suspicion, particularly if the conversation involves pressure tactics.
• Report Suspicious Activity: Immediately report such incidents to Amazon and local law enforcement authorities.

Steps Taken by the Informant

The informant, upon identifying suspicious behavior, cleverly provided fake information during the interaction. This allowed them to gather additional details about the scammers without compromising personal data. Such proactive measures are commendable and serve as an example for others to approach similar situations with caution and awareness.

Conclusion

This incident underscores the increasing sophistication of scams targeting businesses. It is vital for individuals to remain alert and practice stringent due diligence to safeguard their information and assets. Collaboration between companies like Amazon and authorities is essential to curb such malicious activities and bring perpetrators to justice.