Amazon OTP Passcode scam call?

Unopenedpackofmenssocks · 2025-04-03T09:33:19+00:00

Posting here for traffic, sorry. MIL has just rung me in a panic as she got an automated claiming to be Amazon fraud alert telling her that someone was trying to change her Amazon password. She was asked to press 1 if it was not her, which she did. She was then asked to enter a one-time passcode, which she received by text, but she couldn’t do it quickly enough and the call disconnected. The “fraud line” then rang back 2 more times immediately with the same message and she finally put in the OTP and it stopped. The final message was something like “thank you we’ll let you know if any more issues”. She didn’t reveal any account information or personal information. She didn’t speak to a human. Does anyone have any idea what this might have done? We’ve frozen all her bank cards and reported to Amazon via the app. They haven’t said whether or not it was them, just sent an automated reply saying that it’s OK to keep using her account. But we’re worried that this OTP thing has somehow compromised her phone? Has anyone ever had this? Any advice on what to do now?

Original poster

Unopenedpackofmenssocks · 03/04/2025 11:03

OK so thinking it through. Scammer tries to log into MIL Amazon account.

Amazon say they need to enter a OTP.

Scammer calls MIL pretending to be Amazon just before Amazon send through the OTP. Tells MIL to enter the OTP on phone touch pad so they can then use it to get into her Amazon account?

So I’m thinking that as long as we rescue the Amazon account it can’t do any more harm than that? Or could they have got into the Amazon account and stolen her card details or something?

OP posts:

OrigamiOwls · 03/04/2025 12:19

Definitely get straight onto her Amazon account and change the password. Unfortunately I don't think there is much you/she can do right now other than keep a careful eye on her band accounts.

Hoppinggreen · 03/04/2025 12:22

Never ever give anyone a OTP, even someone from your bank and you KNOW they are from your bank

LIZS · 03/04/2025 12:26

Are her card details saved there? Change the Amazon password asap and check if there are any new transactions.

Original poster

Unopenedpackofmenssocks · 03/04/2025 12:29

Thanks. Yes, account passwords already changed and extra Face ID security now added too.

So what you are saying @Hoppinggreen is that the OTP must only be entered on to the actual website. MIL was confused because she was sent it and asked by “Amazon” to enter it on her phone keypad. So in her mind she wasn’t giving it to anyone, she was entering it into a system. The thing is that if you have actually requested a OTP yourself from the website then you are sitting looking at the boxes where it needs to be typed in. If the scammer has requested the OTP then you are not in the site already and you have “Amazon” calling you and saying we’ve sent you a code, this is what you need to do with it.

Obvious in hindsight. My main concern is whether this scam goes further than just trying to get access to the Amazon account, which we have successfully blocked.

OP posts:

Original poster

Unopenedpackofmenssocks · 03/04/2025 12:30

LIZS · 03/04/2025 12:26

Are her card details saved there? Change the Amazon password asap and check if there are any new transactions.

That was done with 5 minutes of her calling me.

OP posts:

Original poster

Unopenedpackofmenssocks · 03/04/2025 12:32

and bank cards frozen within 2 minutes, but we need to decide when it’s safe to unfreeze them. Or if we are safer to request new ones.

OP posts:

toomuchfaff · 03/04/2025 14:30

That's a scam. Amazon colleague will never ask for a OTP. They are designed to be entered into the Amazon application or the Amazon website by you when you try to sign in.

Don't ever give them to anyone who asks. If they ask, they are a scammer. Simple.

Phunkychicken · 03/04/2025 14:32

Check this want a sim swap fraud, she should contact her mobile company

WalkingThroughTreacle · 03/04/2025 14:35

You can't see your stored payment cards in Amazon in full, only the last 4 digits. So probably no need to cancel her cards, though aside from the inconvenience no harm done. Just check her orders and make sure they haven't purchased anything in the brief time they may have had access. Also check they haven't added any additional delivery addresses.

Allhatnocattle · 03/04/2025 14:35

Basically it’s to get into her Amazon account, so change the password etc.
it won’t have compromised her phone. For future never give a OTP to someone on the phone, one time codes are for you to enter into (the legit) website or app to confirm it’s you. You won’t have to give it to someone on the phone

Allhatnocattle · 03/04/2025 14:38

Phunkychicken · 03/04/2025 14:32

Check this want a sim swap fraud, she should contact her mobile company

It’s not a sim swap, if it was there would be no point in getting her to give them the Amazon otp they could just do it themselves. She also had the service to receive the phone call, so no loss of service as per a sim swap, Just an Amazon scam to get access to the Amazon account

TheGoogleMum · 03/04/2025 14:47

I had a OTP scam the other week, luckily I didn't fall for it. Never tell Anyone else OTP it'll be someone else trying to use the account

Original poster

Unopenedpackofmenssocks · 03/04/2025 16:19

I’m grateful for the help but not sure why people keep repeating “never give your OTP to anyone”. I know this and so does my MIL really, but she was caught off guard by the fact that nobody spoke and asked her to say the OTP or put it in an email or text or anything. It was just a recorded message telling her to type it into her keypad like a phone menu prompt. I’m fairly sure I’ve had legit calls from my bank saying “Did you make this transaction? If no, press 1.” She thought that entering the code would put her through to an Amazon operator who was trying to help her stop a fraudster. Bastards.

OP posts:

PinkElephantsOnParade2025 · 03/04/2025 16:22

I always delete my bank details from Amazon and use their prepaid gift card option.

Allhatnocattle · 03/04/2025 16:24

but not sure why people keep repeating “never give your OTP to anyone”.
because it’s worth repeating and press 1 to get through to X is not similar to typing out your code for a random phone call that comes through and wouldn’t be used to put you through to an operator. A blanket don’t give it to anyone covers this type of situation too.

Original poster

Unopenedpackofmenssocks · 03/04/2025 17:26

Allhatnocattle · 03/04/2025 16:24

but not sure why people keep repeating “never give your OTP to anyone”.
because it’s worth repeating and press 1 to get through to X is not similar to typing out your code for a random phone call that comes through and wouldn’t be used to put you through to an operator. A blanket don’t give it to anyone covers this type of situation too.

Yes I know this and have already told my MIL. I am explaining how she got confused.

OP posts:

Hoppinggreen · 03/04/2025 18:35

Unopenedpackofmenssocks · 03/04/2025 16:19

I’m grateful for the help but not sure why people keep repeating “never give your OTP to anyone”. I know this and so does my MIL really, but she was caught off guard by the fact that nobody spoke and asked her to say the OTP or put it in an email or text or anything. It was just a recorded message telling her to type it into her keypad like a phone menu prompt. I’m fairly sure I’ve had legit calls from my bank saying “Did you make this transaction? If no, press 1.” She thought that entering the code would put her through to an Amazon operator who was trying to help her stop a fraudster. Bastards.

Because by typing it in she was effectively giving it to someone.
You should only use a OTP if you have gone to a website yourself and not been directed there.
I am not blaming her, these people are crafty but she DID give her OTP to someone
Good job you are straight onto it

Original poster

Unopenedpackofmenssocks · 03/04/2025 18:49

BUT I know that what she did was the same as giving it to someone. Is that not clear from my OP? I posted asking for advice on next steps, not to have what I already knew repeated back to me.

It’s as if I’d posted saying “my toddler wrote on the wall with a Sharpie today, anyone know if I can get it off without leaving a mark?”

And then everyone replying “You should never let your toddler have have a Sharpie unsupervised ”.

OP posts:

Hoppinggreen · 03/04/2025 18:55

Ok, good luck with it

Allhatnocattle · 03/04/2025 18:57

e. Is that not clear from my OP? I posted asking for advice on next steps, not to have what I already knew repeated back to me.

not really clear, hence myself and others giving that information, you’re talking about how it could have compromised the phone but the otp wouldn’t have done that. People are trying to be helpful and make it clear the steps to take and make sure that’s it’s clear to not give out that kind of thing. If you’re asking for advice on phone scams and next steps for what to do that is a huge first step that every bank, company etc would repeat back to you regardless of whether you said you knew it, i don’t think it’s something to get offended about

lnks · 03/04/2025 19:00

People have answered in good faith, and now you're being a bit rude, OP

Original poster

Unopenedpackofmenssocks · 03/04/2025 19:01

lnks · 03/04/2025 19:00

People have answered in good faith, and now you're being a bit rude, OP

Nope, many people are being patronising. I have thanked those who actually answered the question I asked.

OP posts:

Original poster

Unopenedpackofmenssocks · 03/04/2025 19:03

Allhatnocattle · 03/04/2025 18:57

e. Is that not clear from my OP? I posted asking for advice on next steps, not to have what I already knew repeated back to me.

not really clear, hence myself and others giving that information, you’re talking about how it could have compromised the phone but the otp wouldn’t have done that. People are trying to be helpful and make it clear the steps to take and make sure that’s it’s clear to not give out that kind of thing. If you’re asking for advice on phone scams and next steps for what to do that is a huge first step that every bank, company etc would repeat back to you regardless of whether you said you knew it, i don’t think it’s something to get offended about

What the first thing to do is to get a time Machine and go back and not do what you did? You are confusing banks’ advice to prevent scammers being successful and advice about dealing with the consequences of someone having fallen for a scam.

OP posts:

Allhatnocattle · 03/04/2025 19:05

Unopenedpackofmenssocks · 03/04/2025 19:03

What the first thing to do is to get a time Machine and go back and not do what you did? You are confusing banks’ advice to prevent scammers being successful and advice about dealing with the consequences of someone having fallen for a scam.

Show quote history

I’m not, it’s worthwhile information to pass onto her again, it’s the thing they say after your scammed because people who fall for it once tend to fall and are targeted again.
It’s about not repeating the same thing. No Time Machine required