"Your Amazon package could not be delivered": is that text a scam?

Fake Amazon notifications work by imitating routine, believable events: a package that couldn't be delivered, an order you don't recall making, a refund that's supposedly pending, or a product recall asking you to confirm your payment details. The message can arrive by text, email, phone call, a messaging app, or even a browser notification. The destination is what varies — sometimes a copied sign-in page designed to steal your password, sometimes a form asking for a small "redelivery fee," sometimes a phone number answered by a fake support agent walking you through a "cancellation." Amazon's own guidance is blunt: verify suspicious communications independently, never through the link or number in the message itself.

The scam doesn't need a real order to exist. It only needs enough people to have an Amazon account that a plausible-sounding message reaches someone who's actually expecting a package. That's why these messages are sent in bulk rather than targeted at anyone in particular.

Because Amazon is used by so many households for both everyday purchases and subscriptions, almost any household will have something plausible going on at any given time — a delivery in transit, a recent purchase, a subscription renewal — which is exactly what makes a generic "there's a problem with your order" message land convincingly even when it's sent to millions of people at once.

The most common versions

Several variations show up repeatedly. "We couldn't deliver your package" asks for a small payment to redeliver it — the low amount is designed to feel too minor to be worth questioning. "Your refund is pending" asks you to "verify" a bank account or card; a genuine refund is always visible directly inside your order history, not something that requires you to submit new payment details by email. "An order was placed on your account" comes with a fake invoice for an expensive item and a "cancellation" phone number — the person who answers asks for passwords, verification codes, or remote-access software rather than actually canceling anything. "A recalled product qualifies for a refund" uses safety concerns as the urgency hook instead of a delivery problem.

How to verify safely

Close the message and open the official Amazon app, or type the address into your browser manually rather than tapping any link. Check Your Orders and Returns, the Message Center, in-app notifications, and your actual card or bank statement. If the order, charge, or refund the message describes doesn't show up anywhere in your real account, there's nothing to act on — don't fill out an external form just to be safe.

Warning signs

• A misspelled or oddly extended domain, or a shortened link hiding the real destination
• Pressure to act immediately, or a threat that the order will be cancelled
• A request for a one-time passcode, gift cards, cryptocurrency, or remote-access software
• A phone number that doesn't match Amazon's official support channels

Keep in mind that logos, sender names, and even the visual layout of an email can be copied convincingly, and caller ID on a phone call can be spoofed too — none of that is proof the message is genuine.

It also helps to remember that the destination matters more than the wrapper. A message can arrive through a completely ordinary-looking text thread, sit alongside genuine notifications, and still lead to a form that has nothing to do with Amazon. The channel a message arrives through is not a signal of legitimacy — only what happens after you open the linked page is.

If you already clicked

If you didn't enter any information, close the page and check your device for unexpected downloads or browser extensions. If you typed in a password, change it immediately and turn on two-step verification. If you entered card details, contact your card issuer using the number on the back of the card (not one from the message) and watch your statement closely. If you installed anything described as "support" or "remote access" software, disconnect the device from the internet and remove it as soon as possible.

Where to report it

Amazon has an official process for reporting suspicious emails, texts, calls, and websites that impersonate the company. It's also worth reporting the message as phishing directly to your email or mobile provider. If you lost money, contact your payment provider first and then file a report with local law enforcement — the faster you act, the better the odds of stopping or reversing a payment. Reporting the message even when you didn't fall for it still helps, since it feeds the pattern data that email and mobile providers use to filter similar messages for other people.

Quick checklist

• Never pay a "redelivery fee" through a link in a text message
• Check refunds and orders inside the official Amazon app, not through the message
• Don't call a "cancellation" number listed in a suspicious invoice
• Treat requests for passcodes, gift cards, or remote access as a hard stop
• Report suspicious messages to Amazon and your email/mobile provider