Over 1,000 fake Amazon sites spotted ahead of Prime Day 2025 sale

Amazon

As buyers prepare for Amazon Prime Day sale 2025, which is starting from July 8, cybercriminals are gearing up too. With millions expected to log in for lightning deals and discounts, security experts are warning that this shopping frenzy also opens the door to a flood of online scams.

According to Check Point Research, over 1,000 new websites resembling Amazon were registered in June 2025 alone and 87% of them are flagged as suspicious or outright malicious. These lookalike domains often contain slight misspellings or unusual endings like “.top” or “.online,” designed to trick people into thinking they’re the real thing.

Scammers usually rely on two main tricks: fake websites and phishing emails.

Fake domains are created to mimic Amazon’s checkout or login pages. They might look convincing at first glance, but one wrong click can lead to stolen passwords, unauthorized purchases, or even identity theft.

Then there are the phishing emails,  the kind that say things like “Refund Due” or “Account Problem.” These messages often seem to come from Amazon’s support team and push users to click links that lead to scam websites. In one real case, a phishing email with the subject “Refund Due – Amazon System Error” led users to a fake login page that captured their credentials.

It’s all about timing and trust. Cybercriminals know shoppers are rushing during Prime Day, and they use that urgency to their advantage.

To stay safe, experts recommend some simple but powerful precautions:

–Stick to the official Amazon app or website.

–Be cautious of emails asking you to update your account or claim a refund.

–Don’t fall for flashy deals that look too good to be true.

–Enable two-factor authentication.

–Keep your software and browsers up to date.

As the deals roll in, remember: Prime Day is also prime time for scams. Stay alert, shop smart, and double-check before you click.