The fake Amazon call: "there's a suspicious purchase on your account"

The message arrives as a call, a text, or an email, and the details barely change: an iPhone was just charged to your account. Or a laptop is about to ship to an address in another state. There's a case number, a charge amount precise to the cent, and a phone number to call "if you did not authorize this purchase." The person who answers is polite, unhurried, and sounds exactly like every customer-service agent your parent has ever talked to. That's the point — this script imitates a routine experience, not an emergency.

It's one of the most common shapes of the business-imposter scam — part of the imposter-scam category that generated roughly one in three fraud reports and $3.5 billion in reported losses in 2025, more than any other category the FTC tracks. What makes this one dangerous isn't drama. It's that everything about it feels like a normal Tuesday errand, right up until the moment it isn't.

The tell is in the delivery: real order problems live in the account

A real issue with an Amazon order — a payment that didn't go through, a delivery problem, a genuinely suspicious sign-in — shows up inside the account: in the app, on the website, under Your Orders and your messages. It waits for you there. It does not need you to call an unfamiliar number within the hour.

So the entire defense fits in one habit: never act on the message — check the account yourself. Close the text or hang up the phone, open the Amazon app or type amazon.com directly, and look at Your Orders. If the $847 iPhone isn't there, there was no purchase, and the message was the scam. Two minutes, no argument, works every time — and it's the same verify on a channel you own rule that defeats the fake bank fraud department and the "suspended Social Security number" call.

A real order problem waits for you inside the account. A scam needs you to call the number in the message.

Where the script goes if you stay on the line

The opening is just the hook. What the "agent" actually wants is one of three things:

• Remote access. "I'll process the refund — I just need you to install a small support tool." The tool is ordinary remote-control software, and installing it hands the caller the computer: the browser, the saved passwords, the online-banking session. This is the same move that powers tech-support scams, a category that cost families over a billion dollars in 2025 on its own.
• The overpayment reverse. The agent "refunds" the fake charge and then — look at the screen, something went wrong — claims they sent too much and need the difference back. The extra money on the screen was never real (numbers on a screen are easy to fake once they control the computer), but the money your parent sends back is. It leaves by gift card, wire, or cash — the payment methods that don't come back. This is the same engine as the fake-check overpayment scam, run live over the phone.
• The account takeover. "For verification" — the account password, the card number, a one-time code texted to the phone. A real company's support line never needs the password or a security code; those exist precisely so that only your parent has them.

The payment ask ends the question

Whatever the storyline, the ending gives it away. The FTC's rule is short enough for a card on the refrigerator:

A refund, by definition, is money coming to you. The moment a "refund" requires buying gift cards, sending a wire, feeding cash into a machine, or granting control of the computer, the story around it stops mattering. There is no version of a genuine retailer refund that works that way.

What to have a parent say

Agree on it in advance as a family rule, the same way you'd agree on the callback rule for family-emergency calls. The strength of a pre-agreed rule is that it doesn't require your parent to out-argue a professional in the moment — it requires them to do the thing the family already decided.

If it already happened

Skip the blame entirely — these scripts are run all day by people who are good at them, and a parent who feels judged reports less next time. Then, the same day:

• If remote software was installed: disconnect that computer from the internet. Change the Amazon password and the email password from a different device, and turn on two-step verification. Have the computer checked before using it for banking again.
• If money moved or card details were shared: call the bank or card issuer's fraud line — the number on the back of the card — and say the words "unauthorized transaction." Then run the full first-10-minutes drill.
• If gift cards were bought: call the card issuer immediately with the cards and receipts in hand, and ask them to freeze what's left. The gift-card article covers what's realistically recoverable.
• Report it at ReportFraud.ftc.gov. Expect follow-up calls — including "recovery" offers to get the money back for a fee. Those are scams every time.

Why this one lands on older adults

Not because they're careless — the numbers don't tell that story. In the FBI's 2025 internet-crime figures, adults 60 and older filed about 20% of fraud complaints but carried roughly 37% of reported losses: what's different is the size of what's reachable, not the judgment of the person answering the phone. One checking account, decades of savings, one phone. The fix is not vigilance lectures — it's a handful of family rules that make the safe response automatic: check the account yourself, never on the number in the message; urgency means pause; nobody moves money alone.