Amazon account hacked

[two sheds]

Passw0rd

Yes, much too secure, what did you change it to?

 

[tommers]

Yes, much too secure, what did you change it to?

M0nk3y

 

[two sheds]

 

[not-bono-ever]

Their password databases are a useful eye-opener too.

Have I Been Pwned: Pwned Passwords

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

haveibeenpwned.com

View attachment 220326

I assume this site is legit- but it is a great way of compiling a database of peoples passwords and stuff

 

[chainsawjob]

I got a reply from the Amazon investigations team

I wanted to confirm in writing for you that your account has been investigated by our specialist team and no unauthorised activity has been found. <snip> I've checked and see that it seems to be your family members or friends who have access to your account has placed the order. In this case I request you to check with the members who have access to your account.

Cheeky fuckers.

When I logged in this morning my password had been changed from the new one I set up.

I've used the chat facility to ask for my account to be closed, you can't close it yourself, obv they don't make it very easy. It has to be referred to another dept and will take 1-2 days. I asked them to put a block on my account so no further orders can be placed & to cancel the Prime I was fraudulently signed up for, but got no answer to that request. Ho hum. At least no further orders have been placed, but it was worrying that I couldn't get into my account at first this morning. Looks like the fraudster is still at it, weird they didn't place an order though, or change my phone number/email or anything (to prevent me accessing my account via 2-step verification)

 

[mauvais]

Are you saying you've set up 2FA, or are you talking about your phone number as the recovery mechanism for a lost password?

 

[chainsawjob]

Are you saying you've set up 2FA, or are you talking about your phone number as the recovery mechanism for a lost password?

I set up 2FA after I got hacked. To set up the latest new password today it emailed me with a link. To then get in after changing my password it sent a one time code to both my email and my phone.

 

[mauvais]

I set up 2FA after I got hacked. To set up the latest new password today it emailed me with a link. To then get in after changing my password it sent a one time code to both my email and my phone.

If you've got 2FA set up then noone should have been able to change your password. I'd suggest that something else has happened.

 

[two sheds]

Was it Amazon who changed your password after you told them what was happening?

I can't remember whether they signed me up for Amazon Prime without me asking (or me having pressed the wrong button) so I unsigned me down for it.

And yes the family statement is cheeky, clearly trying to get out of any compensation type claims if you had lost any money.

 

[Buddy Bradley]

"Accidentally" signing up for Prime is super-common, mostly because they try to trick you into it every time you checkout.

 

[two sheds]

If you've got 2FA set up then noone should have been able to change your password. I'd suggest that something else has happened.

Haven't there been problems with 2FA if the second one is a mobile?

 

[chainsawjob]

The saga rolls on...

I've used the chat facility to ask for my account to be closed, you can't close it yourself, obv they don't make it very easy. It has to be referred to another dept and will take 1-2 days. I asked them to put a block on my account so no further orders can be placed & to cancel the Prime I was fraudulently signed up for, but got no answer to that request. Ho hum.

Today:



Let's hope that Richard has more success than Harold did last week

And then...



No! Fuck off Earth's most Customer Centric Company my arse.

Also, the plot thickens...

I got a reply from the Amazon investigations team

I wanted to confirm in writing for you that your account has been investigated by our specialist team and no unauthorised activity has been found. <snip> I've checked and see that it seems to be your family members or friends who have access to your account has placed the order. In this case I request you to check with the members who have access to your account.

Cheeky fuckers.

Well, I can now see why they thought it was a friend or family with access to my account. The card that had been added (which it turns out was back in March ), was in the name of my niece, whose name, address and phone number are listed in my address book, as I must have posted her a present back when I used to use Amazon, over 5 yrs ago. The card isn't hers, I checked. The fraudster must have lifted those details from my account.

I still can't work out why though. If they added a card, and listed it under her name, chances were the payment never would have gone through. Although my brother tells me that he's set up payment things like this for companies' websites in the past (he's an IT person), and not all of them check that cards tally with names/addresses. Which surprised me. Everything I buy online, it checks, and if the name I've said is on my card, and the address I've given, don't tally with what the bank has for me, the payment doesn't go through. I thought this was universal nowadays. Maybe it's changed since he used to do it.

 

[two sheds]

I tried to engage with the Hermes "chat room" a couple of times because it seems absolutely fucking impossible to talk to a human being at that company to discuss a delivery. Second time I asked a couple of random questions and realized it was actually a bot and I was going to get nothing out of it apart from the standard bot replies when they fail to deliver a parcel.

You expect people to have standard replies that they can just hit one button, but there's a feeling of disgust when you realize there's no fucker there.

 

[chainsawjob]

I tried to engage with the Hermes "chat room" a couple of times because it seems absolutely fucking impossible to talk to a human being at that company to discuss a delivery. Second time I asked a couple of random questions and realized it was actually a bot and I was going to get nothing out of it apart from the standard bot replies when they fail to deliver a parcel.

You expect people to have standard replies that they can just hit one button, but there's a feeling of disgust when you realize there's no fucker there.

Yes, I almost put 'Harold' and 'Richard' in quotes cos I'm fairly suspicious I've been talking to a bot. Although the spelling and grammar mistaks ( ) made me think maybe I'd got a real live person!

 

[chainsawjob]

I also cancelled the Prime I was fraudulently signed up for (my cards were all expired so they couldn't have got any of my money, at least). They ask you about 10 times to confirm you want to cancel. "Are you sure? Are you really sure? There are some really good benefits? One last time, do you want these wonderful benefits to end? Are you sure? Really sure? Really, really sure? Oh alright then, if you're sure." Grrrr.

Edit: last sentence to add to that... "If you're really sure, we'll action that for you... in 3 weeks time".

 

[wtfftw]

I have an ongoing, years long problem with an American woman who must have the same name as me who periodically sets up to have bills and so on sent to my email address. It's remarkably difficult to convince people, especially when all I get are emails saying "Log in to see your bill" so I don't actually know her address, phone number etc. that I'm not that person. So far this year a US mobile phone company has been very helpful and sorted it, but a hotel chain rewards programme won't do anything.

I quite like one of my versions. We're reasonably friendly when I pass on emails. Must be weird for her tho as I know quite a lot about her life.
I've got a couple in the States. One recently signed me up to the democrats election propaganda. Like all of it. It's really hard to get all of that to stop. I'm not sure if that's the same one who is on older Christian dating websites.

 

[chainsawjob]

Another Friday, another chat with Amazon customer services help 'bot'/person. Account still not been closed. 2 weeks since requesting it, one week since I last chased them up. Sigh.

This time it resulted in getting another email, with a link to contact them, and then a further email which I had to reply to to confirm I want to close it. They're really making me work for this!

 

[chainsawjob]

But at least no more fraudulent activity on my account