Amazon Account Hacked? Orders You Didn’t Place and What to Do Now

An order confirmation for something you never bought. A delivery address you don’t recognise. A password that suddenly doesn’t work. These are the tell-tale signs of a hacked Amazon account — and because Amazon stores your cards, addresses and order history, you want to move fast. Here’s what to do, step by step, to lock the attacker out, cancel fraudulent orders and get your money back.

Signs Your Amazon Account Has Been Hacked

• Order confirmations or shipping emails for items you didn’t buy
• New delivery addresses, especially ones set as default
• Unfamiliar payment methods, or your gift card balance suddenly used
• Password or email address changed without your action
• Messages to sellers you didn’t send, or reviews you didn’t write
• Unknown devices on your Kindle, Fire TV or Alexa account
• Digital purchases — ebooks, apps, video rentals — you don’t recognise

Step 1: Secure Your Account

1. Change your Amazon password. Go to Your Account → Login & security → Password. Use a long, unique password you don’t use anywhere else.
2. Turn on Two-Step Verification in Login & security. An authenticator app is safer than SMS.
3. Check your email and phone number in Login & security and correct anything that’s been changed.
4. Secure your email account too. If the attacker got into your email, they can reset your Amazon password again. Change that password and turn on 2FA there first if you suspect it.
5. Sign out of other devices using the device and login management options in your account, and deregister unknown Kindle, Fire TV or Alexa devices under Content & Devices.

Step 2: Find and Cancel Fraudulent Orders

1. Open Your Orders and cancel anything you didn’t place that hasn’t shipped.
2. Check Archived Orders — attackers often archive their orders to hide them from you.
3. Look at Digital Orders for ebooks, apps, Prime Video purchases and subscriptions.
4. Review Memberships & Subscriptions for anything new.
5. Note the order numbers of anything that already shipped — you’ll need them when you contact Amazon.

Step 3: Clean Up Addresses, Payments and Gift Cards

• Addresses: Your Account → Your Addresses. Delete anything you don’t recognise and reset your default address.
• Payment methods: Your Account → Your Payments. Remove cards or bank accounts you didn’t add.
• Gift card balance: check whether your balance was spent or new cards were redeemed.
• Amazon Pay: if you use Amazon Pay on other sites, review recent transactions and merchant authorisations.
• Alexa: check purchase settings — voice purchasing can be switched off or protected with a code.

Step 4: Report It to Amazon

Contact Amazon customer service through the Help section of the app or website and explain your account was compromised. Amazon provides a way to report transactions or account activity you believe is unauthorised. Have your order numbers ready. Amazon can investigate, cancel or refund fraudulent orders and help secure the account.

Step 5: Protect Your Bank and Cards

Call your bank or card issuer using the number on the back of your card. Report any charges you didn’t make and ask whether the card should be blocked and replaced. Most card issuers have zero-liability protections for fraudulent charges when you report them promptly. Keep a note of who you spoke to and the reference numbers. In India, report card fraud to your bank immediately and call the 1930 cybercrime helpline for online fraud.

How Amazon Accounts Get Hacked

• Reused passwords leaked from other websites — by far the most common cause
• Phishing emails and texts about fake orders, refunds or “account suspended” warnings
• Fake customer support numbers found through search ads or social media
• Compromised email accounts that let attackers reset Amazon passwords
• Malware that steals saved browser passwords

Amazon Scams That Look Like a Hacked Account

Not every scary Amazon message means you’ve been hacked. Some are scams designed to make you think you have, so you’ll hand over details. Watch for these:

• “Suspicious purchase” calls or texts that ask you to press a key or call back to cancel an expensive order. Real order problems show up in Your Orders.
• Refund scams where a caller says they refunded you too much and asks you to send money back or install remote-access software.
• Fake Prime renewal notices warning of a large charge and pushing you to “cancel” through a link.
• Gift card requests. Amazon will never ask you to pay a bill, fee or fine with gift cards.
• Delivery problem texts with a link to “reschedule” that lead to a fake login page.

If you already gave a scammer your password or installed remote-access software, treat it as a real compromise: follow the steps above, uninstall the software, and run a security scan on your computer.

If Items Were Shipped to the Attacker

Report shipped orders to Amazon with the order numbers. Because the items were bought with your payment details but sent elsewhere, Amazon and your bank will investigate. Don’t try to contact the delivery address yourself. If a package arrives at your home that you didn’t order and a stranger asks for it, that can be part of a scam — report it to Amazon rather than handing it over.

If You’re an Amazon Seller

A hacked seller account is more serious because payouts and listings are at stake. Change your password and 2FA immediately, check that your bank deposit details haven’t been changed, and review listings, prices and inventory for tampering. Contact Seller Support through Seller Central right away and document everything. Consider adding separate user permissions so staff logins don’t share your main account.

After It’s Sorted: Make It Harder Next Time

• Keep Two-Step Verification on, ideally with an authenticator app or passkey
• Use a unique Amazon password stored in a password manager
• Turn on order and account alerts so you see new activity quickly
• Remove saved cards you rarely use, and consider a virtual card for online shopping
• Set an Alexa purchase code or disable voice purchasing
• Check which apps are connected to your accounts and remove what you don’t use

• Change your password and turn on Two-Step Verification first
• Cancel fraudulent orders — check Archived and Digital Orders too
• Remove unknown addresses, payment methods and devices
• Report it to Amazon customer service and call your bank
• Secure your email so the attacker can’t reset your password again

Frequently Asked Questions

Will Amazon refund orders I didn’t place?

Amazon investigates unauthorised orders reported through customer service. Report them quickly with order numbers, and also contact your bank to dispute any card charges.

Why would someone hack an Amazon account?

To buy goods with your saved cards, use gift card balances, resell items, or use your account and reviews for scams. Saved payment details make Amazon accounts valuable.

How do I know an Amazon email is real?

Check messages inside your account under Message Center rather than trusting email. If a message isn’t there, treat it as suspicious.

Can someone hack my Amazon account through Alexa?

Alexa devices use your Amazon account, so anyone with access to an Alexa device linked to your account could potentially order items by voice if purchasing is enabled. Set a voice purchase code or turn voice purchasing off in the Alexa app.

Should I remove my card from Amazon?

You don’t have to, but removing cards you rarely use limits damage if the account is compromised again. Two-Step Verification is the more important protection.

How long does Amazon take to refund fraudulent orders?

It depends on the case and payment method. Report unauthorised orders to Amazon promptly with order numbers, and dispute card charges with your bank at the same time so neither process holds up the other.

The Bottom Line

Lock the account first, then clean up: new password and Two-Step Verification, cancel hidden orders, remove strange addresses and cards, and report it to Amazon and your bank. Most of the damage from a hacked Amazon account can be undone if you act quickly. For other accounts, see our guides to PayPal, Apple Account and Google takeovers.

Last updated: October 21, 2026. Sources: Amazon Help, PCWorld.