Amazon's Vague Order Confirmation Emails Spark Phishing Fears

Amazon's new order confirmation emails have left some customers puzzled and potentially vulnerable to phishing attacks. The company has changed its email format to direct users back to its app and website, citing a need to improve customer privacy by reducing shared information outside of Amazon.

However, critics argue that the vague labels used in these emails can make it difficult for customers to verify their purchases, increasing the risk of phishing attempts. Arun Vishwanath, founder of the Cyber Hygiene Academy, warned that the change is essentially asking shoppers to trade privacy for security and could spur impersonation attempts.

Phishing attacks often mirror official emails and trick people into clicking on a bogus link that might contain malware or request login credentials. Last year, Americans reported $3.5 billion in losses from so-called imposter scams, with Amazon being the second-most impersonated company after Best Buy/Geek Squad.

Erich Kron, an adviser to Knowbe4, a firm that trains people to avoid phishing and other attacks, noted that the change itself could attract scammers who will use the new format to launch phishing attacks. He emphasized that it's never safe to click on random links in emails, even if they appear to come from Amazon.