Amazon "Suspicious Login" Text Scam — Foreign Country Warning
Foreign login alert — country-of-origin fear triggers immediate click
Amazon Security Alert: A sign-in was detected from Romania. If this wasn't you, secure your account: amzn-secure-login.com
SMS
Confirmed scam
The IP address or device detail included in some variations is fabricated to make the alert seem technically credible.
Typical victim loss: $100–$2,000
FTC Consumer Sentinel 2024 — impersonation fraud median $1,760
First seen
Aug 2024
Category
Tech Support
Attack vector
SMS
Trigger
Panic / Urgency
3 red flags in this message
Foreign location bait
Mentioning a foreign country (Romania) triggers immediate alarm.
Fake domain
amzn-secure-login.com is not Amazon.
IP address display
Used to appear technical and credible.
What happens if you click
Amazon login credentials stolen.
Two-factor authentication bypassed if OTP entered on fake site.
Full account takeover and fraudulent orders.
Fake Amazon domains used in this scam
4 identifiedScammers register multiple lookalike domains for the same campaign — rotating them to avoid spam filters. Any link from these domains is fraudulent.The only legitimate Amazon address is amazon.com.
4 fraudulent domains identified — consistent with organized scam infrastructure.
Other versions of this message
Scammers rotate wording to bypass spam filters. All variations lead to the same outcome.
Amazon: Unrecognized login attempt from a new device. Verify now.
Amazon Security: New sign-in from IP 185.220.x.x. Not you? Click to secure.
Got a similar message? Check it now.
Paste any text message or email for an instant analysis — free, no account needed.
Free · No signup · Messages never stored · ⌘↵ to analyze
People also search for
Frequently asked questions
How does Amazon actually notify you of suspicious logins?+
Via email to your registered address and in-app notifications. Never via SMS link.
What if someone really did log into my Amazon account?+
Go to amazon.com > Account & Lists > Login & Security > Manage Devices. Remove unrecognized devices and change your password.
Why do scammers use foreign countries in the message?+
It triggers an emotional fear response that bypasses rational thinking. You're more likely to click without verifying.
Other Amazon scams
Amazon "Account Locked" Text Scam — Phishing Warning
Account lockout via suspicious activity
Amazon Prime "Renewal" Text Scam — Fake Cancellation Warning
Unauthorized Prime renewal
Amazon "Order Problem" Text Scam — Fake Verification Alert
Order problem notification
Amazon "Payment Declined" Text Scam — Billing Phishing Warning
Payment declined update
Received a suspicious message?
Free · No signup · AI-powered detection
Check your message →First documented: August 2024
Source: FTC Consumer Sentinel 2024 — impersonation fraud median $1,760
← Full scam database