Amazon "Suspicious Login" Text Scam — Foreign Country Warning
Foreign login alert — country-of-origin fear triggers immediate click
Amazon Security Alert: A sign-in was detected from Romania. If this wasn't you, secure your account: amzn-secure-login.com
SMS
Confirmed scam
The IP address or device detail included in some variations is fabricated to make the alert seem technically credible.
Typical victim loss: $100–$2,000
FTC Consumer Sentinel 2024 — impersonation fraud median $1,760
First seen
Aug 2024
Category
Tech Support
Attack vector
SMS
Trigger
Panic / Urgency
3 red flags in this message
Foreign location bait
Mentioning a foreign country (Romania) triggers immediate alarm.
Fake domain
amzn-secure-login.com is not Amazon.
IP address display
Used to appear technical and credible.
What happens if you click
Amazon login credentials stolen.
Two-factor authentication bypassed if OTP entered on fake site.
Full account takeover and fraudulent orders.
Other versions of this message
Scammers rotate wording to bypass spam filters. All variations lead to the same outcome.
Amazon: Unrecognized login attempt from a new device. Verify now.
Amazon Security: New sign-in from IP 185.220.x.x. Not you? Click to secure.
Got a similar message? Check it now.
Paste any text message or email for an instant analysis — free, no account needed.
Free · No signup · Messages never stored · ⌘↵ to analyze
Fake Amazon domains used in this scam
People also search for
Frequently asked questions
How does Amazon actually notify you of suspicious logins?+
Via email to your registered address and in-app notifications. Never via SMS link.
What if someone really did log into my Amazon account?+
Go to amazon.com > Account & Lists > Login & Security > Manage Devices. Remove unrecognized devices and change your password.
Why do scammers use foreign countries in the message?+
It triggers an emotional fear response that bypasses rational thinking. You're more likely to click without verifying.
Other Amazon scams
Amazon "Account Locked" Text Scam — Phishing Warning
Account lockout via suspicious activity
Amazon Prime "Renewal" Text Scam — Fake Cancellation Warning
Unauthorized Prime renewal
Amazon "Order Problem" Text Scam — Fake Verification Alert
Order problem notification
Amazon "Payment Declined" Text Scam — Billing Phishing Warning
Payment declined update
Received a suspicious message?
Free · No signup · AI-powered detection
Check your message →First documented: August 2024
Source: FTC Consumer Sentinel 2024 — impersonation fraud median $1,760
← Full scam database