A new twist on an old scam has emerged, in which fraudsters are using the pandemic as the perfect excuse to trick people into buying them Amazon gift cards.
We’ve already exposed the fake texts and calls about the COVID-19 vaccine, sent by criminals attempting to steal personal data and card detail, but now we’ve seen fraudsters hacking into email accounts and using coronavirus isolation as a hook to target victims.
We often hear from scam victims who received a seemingly innocent email from a friend, relative or work colleague only to discover that they were communicating with a fraudster all along.
Once an email account is hacked, criminals will try every trick in the book to make money, including sending emails to their contacts list.
A common tactic is to ask them to buy an Amazon gift card (more often than not, as a present for a “niece”) offering a spurious reason as to why they can’t purchase this themselves – and the pandemic has given scammers the perfect excuse, as you can see below:
How the gift card scam works
As the recipients are likely to trust the address of the sender, they assume the request is genuine and kindly agree to purchase the gift cards.
Now the scammer can simply ask you to share the serial numbers so that they can cash them in.
Though the Amazon gift card scam is the one most commonly reported to Which?, be cautious of any message asking you to make a purchase or divulge personal data.
Here’s another example of a scam message from a hacked email account:
Dealing with emails from hacked accounts
Never answer an unsolicited email without making checks, even if it seems to be from a trusted source.
If you receive an email asking for personal data or any form of financial help, call that friend or family member on a trusted number and let them know their account may have been hacked.
They should then change their password immediately to secure the account, and warn other contacts that they may have received a malicious message. We have a guide on how to do this here
Setting up two-factor authentication will also make it much more difficult for anyone to hack their email account going forward.
Amazon itself specifically makes people aware of this gift card scam on its site. It states:
DO NOT provide any gift card details (such as the claim code) to someone you do not know or trust – and always take steps to verify the identity of anyone asking you to provide gift card details.
Once a claim code, from any gift card, is provided to a scammer, the funds will likely be spent before you are able to contact law enforcement or Amazon.
Have you received a fake email from a hacked account of a friend or family member? Let us know in the comments.