A text message claiming that Amazon owes a refund can look convincing enough to tap without a second thought, which is exactly what the scammers behind it are counting on. The Federal Trade Commission has warned cell phone users about a wave of fake Amazon messages that dangle a refund or a product recall, then steer recipients to a link designed to harvest money or personal data. There is no refund waiting at the other end, only a phishing trap.
These messages have proliferated because texting has become one of the most effective channels for fraud. People tend to read texts within minutes and trust them more than email, and a message that arrives on a phone can feel personal and urgent in a way a crowded inbox does not. Scammers have learned to exploit that immediacy, wrapping a familiar brand around a plausible story to slip past the instinct that would otherwise flag an unsolicited link.
What the fake Amazon refund text claims
The messages typically say that a routine quality inspection flagged a problem with something the recipient recently bought, or that an item has been recalled, and that a full refund is available. To make the offer feel generous, the text often adds that there is no need to return the product, as long as the person clicks a link to claim the money. According to reporting on the FTC warning, that link leads not to Amazon but to a page built to capture login credentials, card numbers, or other sensitive details.
The refund framing works because it flips the usual scam dynamic. Instead of demanding payment, the message promises the recipient money, which lowers suspicion and creates a small sense of urgency to act before the supposed offer expires.
The red flags that give the scam away
Several details tend to expose the message as fraudulent. Coverage from Fox News notes that legitimate companies rarely resolve a recall or refund through an unsolicited text with a clickable link, and that the messages often arrive for purchases the recipient never made or from numbers that have nothing to do with the retailer. Generic greetings, subtle misspellings, and links using unfamiliar web addresses are additional warning signs.
The broader pattern fits a long-running category of phishing that impersonates trusted brands. Scammers rotate through well-known company names precisely because a familiar logo or brand voice makes people more willing to trust a message and less likely to scrutinize the link behind it. Amazon is a frequent target simply because so many households shop there, which raises the odds that a random recipient actually has a recent order the message could plausibly reference.
The mechanics of a text-based scam also differ from email phishing in ways that work against the recipient. A phone screen shows a shortened or truncated link, making it harder to see the true destination, and the informal nature of texting can lower a person’s guard compared with a formal-looking email. Scammers exploit that immediacy, betting that someone glancing at a phone will tap before thinking.
What the FTC tells consumers to do
The agency’s advice centers on not engaging with the message at all. The Federal Trade Commission recommends that people avoid clicking links in unexpected texts and avoid replying, since a response can confirm that the number is active. Anyone worried that a message might be genuine is urged to contact the company through a phone number, app, or website they already know is legitimate, rather than any contact information provided in the text itself.
Checking an Amazon account directly, through the official app or website, lets a shopper confirm whether there is any real issue with an order without ever touching the suspicious link. If nothing is amiss in the account, the text can be treated as a scam and ignored. Legitimate retailers also tend to communicate about orders inside their own apps and account pages, not through unsolicited texts demanding a click, which makes the channel itself a useful warning sign.
Reporting the message and limiting the damage
The FTC suggests forwarding unwanted spam texts to 7726, which spells “SPAM” on a keypad, or using a phone’s built-in “report junk” feature, then deleting the message. Reporting helps carriers identify and block the numbers behind large scam campaigns. Guidance echoed in consumer coverage of the warning stresses that acting quickly matters, because the value of these scams depends on catching people in the brief window before they stop to verify.
For anyone who has already clicked a link or entered information, the recommended steps include changing exposed passwords, watching account statements for unauthorized activity, and contacting a bank or card issuer if financial details were shared. Because the stolen data can circulate and be reused, monitoring accounts for weeks afterward is a sensible precaution. Turning on two-factor authentication for important accounts adds a barrier that can blunt the damage even when a password has leaked.
The scam persists because it is cheap to run and occasionally succeeds. Sending text messages to thousands of numbers costs a scammer almost nothing, so even a tiny response rate can pay off. That economics guarantees the messages will keep arriving in new variations, whether framed as a refund, a recall, a delivery problem, or an account alert. Treating any unexpected text that pushes toward a link with the same skepticism, regardless of the brand it invokes, is the consistent thread running through the FTC’s guidance.
This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.
More from Morning Overview
