Don’t Tap That Link: How to Spot Fake Amazon Recall Texts

You get a sudden text message. It says there’s a critical safety recall for something you recently ordered from Amazon, and you need to act immediately to get a refund or replacement. It looks urgent, maybe even a little scary. Before you click, stop. This is a growing scam designed not to protect you, but to steal your personal and financial information.

Security experts and consumer alerts, including a recent notice highlighted by the Detroit Free Press, are warning about a sharp rise in these deceptive text messages. Scammers are impersonating Amazon, exploiting legitimate concerns about product safety to launch sophisticated phishing attacks. Here’s what you need to know to protect yourself.

What’s Happening: The Recall Text Scam Explained

In this scheme, fraudsters send unsolicited SMS messages to random phone numbers. The messages are crafted to create a sense of urgency and authority. They often include:

  • Fake Recall Alerts: Claims that a product you bought is unsafe, defective, or subject to a government recall.
  • Too-Good-to-Be-True Refunds: Promises of a full refund or a premium replacement if you act now.
  • A Suspicious Link: A shortened URL or a link that looks almost, but not quite, like a real Amazon web address (e.g., “amazon-security-update.com”).
  • Pressure Tactics: Language urging immediate action to avoid “account suspension” or to “secure your refund before the deadline.”

If you tap the link, you are not taken to Amazon’s official site. Instead, you land on a convincing but fraudulent phishing website designed to harvest your Amazon login credentials, credit card details, and other personal information. In some cases, the link may also attempt to install malware on your device.

Why This Scam Is Particularly Effective

This tactic works because it hijacks a legitimate consumer process. People are familiar with recalls for cars, appliances, and children’s products. The idea that a commonly purchased item could be dangerous triggers genuine concern. Scammers bank on that moment of worry to bypass your usual skepticism. They know you’re more likely to act quickly to resolve a safety issue, which is exactly what they want.

The damage goes beyond a compromised Amazon account. Once scammers have your login, they can make purchases, access saved payment methods, and use the same credentials to attempt to break into other accounts where you might use the same password.

What You Can Do: A Practical Defense Plan

Your best defense is a combination of skepticism and knowing how to verify information through proper channels.

1. Recognize the Red Flags. Legitimate Amazon recall communications almost never arrive via unsolicited text message. Be highly suspicious of any text that:

  • Comes from an unfamiliar 10-digit phone number.
  • Uses generic greetings like “Dear Customer” instead of your name.
  • Creates an extreme sense of panic or urgency.
  • Contains a link that doesn’t lead to amazon.com or amazon.ca. Hover over it (on a computer) or press and hold (on a phone) to preview the true destination URL—look for misspellings or strange domains.

2. Verify Any Recall Through Official Channels. If you’re concerned a product you own might be recalled, never use the link provided in a suspicious message. Instead:

  • Go directly to Amazon’s official website or app and log into your account. Check the “Your Orders” section and official messages in the “Message Center” (accessible via your account menu).
  • Visit the official recall website of the U.S. Consumer Product Safety Commission (CPSC) at cpsc.gov/Recalls.
  • Contact Amazon customer service directly through the contact options in your account or on their official help pages.

3. Take Immediate Action If Targeted.

  • Do Not Click. Simply delete the message.
  • Report It. Forward the text to 7726 (SPAM). This helps your carrier block similar scams. You can also report phishing attempts to Amazon by forwarding the message to [email protected].
  • Secure Your Account. If you accidentally entered any information on a phishing site, immediately change your Amazon password and enable two-factor authentication (2FA) in your account settings. Check your order history and saved payment methods for unauthorized activity.

4. Strengthen Your Overall Security.

  • Enable 2FA on all important accounts, especially email and shopping sites.
  • Use unique, strong passwords for different websites. A password manager can help.
  • Be cautious about where you share your phone number online.

Scammers constantly refine their tactics, but the core principles of safety remain the same. When a message evokes fear or urgency, especially about financial or safety matters, pause and verify through independent, official means. Your vigilance is the most effective tool you have.

Sources: Consumer fraud alerts and reporting, including a March 2026 warning from the Detroit Free Press on scammers impersonating Amazon with fake recall texts. U.S. Consumer Product Safety Commission (CPSC) official recall database. Amazon.com official security and spoofing reporting guidelines.