My Amazon Account Was Hacked: What Should I Do?

Discovering that someone has accessed your Amazon account without permission can be frightening. You might notice an unfamiliar order, receive a password-reset notification you never requested, or suddenly find yourself unable to sign in.

Even worse, you may discover that your account email address or other personal information has been changed.

If your first thought is, "I think my Amazon account has been hacked," don't panic. There are steps you can take to regain control, protect your payment information, and investigate what happened.

Acting quickly matters, especially if someone is placing orders or changing your account details. The most important thing to do is secure your account immediately.

In this guide, I'll walk you through what to do if your Amazon account has been compromised, how to recognize suspicious activity, and how to protect yourself from additional financial damage.

What to Do If Your Amazon Account Has Been Hacked: First Steps

Before investigating every order or trying to figure out how the hacker got in, focus on stopping further access. Your next steps depend on whether you can still sign in to your account.

Scenario 1: You Can Still Sign In to Amazon

If your account is still accessible, take these steps as soon as possible.

1. Change your Amazon password. Open the official Amazon website or app, go to Your Account, and select Login & Security. Create a strong password that you haven't used for any other website. Avoid changing it through links in suspicious emails or text messages.
2. Secure your email account. Your email inbox may be the key to resetting your Amazon password. If you suspect someone has accessed your email, change that password, enable two-factor authentication, and review any unfamiliar recovery addresses, phone numbers, or forwarding rules.
3. Check your account information. Review the name, email address, mobile number, and other security information associated with your Amazon account. Remove unfamiliar information and correct anything the hacker may have changed.
4. Enable Two-Step Verification. In Login & Security, follow the instructions to enable Amazon's Two-Step Verification (2SV). Consider an authenticator app or another secure sign-in method offered by Amazon rather than relying only on text messages.
5. Review your registered devices. Open Manage Your Content and Devices and select Devices. Look for unfamiliar Kindle devices, Fire tablets, or other Amazon-registered devices. Deregister devices you don't recognize. If Amazon provides a separate option to sign out of other sessions, use it as appropriate.

Remember that changing your password alone may not remove every existing device session. Review the available security and device-management options rather than assuming the hacker has automatically been signed out everywhere.

Scenario 2: You Are Locked Out or Your Email Changed

The situation is more complicated if the person who hijacked your account has already changed your password, replaced your email address, or modified your Two-Step Verification settings.

Start by opening Amazon's official sign-in page. Select Forgot password? or the available password-assistance option and follow the instructions.

If you can still verify your identity through a registered phone number or another available method, you may be able to reset your credentials.

However, if the hacker has replaced your email address or you can no longer access the required verification method, a routine password reset may not be enough.

Contact Amazon through its official customer-service channels and explain that your account has been compromised.

If Two-Step Verification is preventing access, Amazon provides a dedicated recovery process. You may be asked to complete identity verification or follow additional security instructions.

Submit personal documents only if Amazon requests them through its legitimate, secure verification process.

Important: Don't pay anyone who claims they can recover your account through a private service, and never give an alleged recovery agent your password or sign-in verification code.

How Do I Know If My Amazon Account Has Been Hacked?

Sometimes, a compromised account is obvious because you suddenly lose access. Other times, the signs are subtle.

If you aren't sure whether your Amazon account has been hacked, look for several of these warning signs.

• Unfamiliar orders: You see purchases you don't remember making or transactions that nobody in your household recognizes.
• Your email or password changed: You receive a genuine account-change notification even though you didn't make the change, or your usual sign-in credentials stop working.
• Unexpected verification codes: You receive sign-in or password-reset codes you did not request. This can indicate an attempted login, although it doesn't automatically prove that the account was accessed.
• Unknown shipping addresses: Your address book contains a location that you didn't add.
• Unfamiliar payment or security changes: You notice an added payment method, changed phone number, or modified security setting.
• Unexpected Amazon Prime or digital activity: You find an unfamiliar membership change, digital purchase, subscription, or device registration.
• Suspicious account notifications: You receive legitimate alerts about activity you cannot explain.

One unusual notification isn't always proof of a successful hack. A family member may have placed an order, a payment may have been processed later, or an email could be a phishing attempt pretending to be Amazon.

The important thing is to verify the activity directly through Amazon's website or app. If you find changes you did not authorize, treat the situation as a possible account compromise and begin securing your account.

How to Recover a Hacked Amazon Account

Once you suspect unauthorized access, the goal is to regain control without exposing your personal information to another scam. Follow the recovery route that matches your situation.

1. Use Amazon's Official Account Recovery Process

Go directly to Amazon's sign-in page and use the available password-assistance or account-recovery options. Enter the information associated with your account and follow the instructions displayed on the official website.

If the problem involves Two-Step Verification, Amazon's official Two-Step Verification account recovery guide explains how to proceed when you cannot receive your security code or sign in using your usual method.

2. Contact Amazon if the Recovery Process Doesn't Work

If your email changed, your registered phone number was replaced, or you cannot complete the automated recovery process, contact Amazon Customer Service.

Explain which information was changed, when you lost access, and whether you noticed unauthorized orders or payment activity.

Keep your explanation factual. You don't need to know exactly how the hacker got in before requesting help. Amazon can advise you about the verification steps and recovery options available for your particular account.

3. Secure Any Other Accounts That May Be Exposed

If you reused your Amazon password elsewhere, change it on those websites and apps as well. Start with your email account, financial accounts, and other services that use the same password.

If your email account was compromised, secure it before considering the recovery process complete. Otherwise, someone who controls your inbox may be able to request another password reset and regain access to Amazon.

Recovery can involve additional verification, so don't assume that access will be restored immediately. Follow the official instructions and keep a record of any support case or recovery reference you receive.

How to Secure Your Amazon Account After Recovery

Getting back into your account is a major step, but it doesn't necessarily mean every security problem has been resolved. 

Once you regain access, review your settings carefully and remove any changes you did not authorize.

Review Login & Security Settings

Check your registered email address, mobile phone number, password, and Two-Step Verification settings. Confirm that the contact information belongs to you and that no unfamiliar authentication method has been added.

If the hacker changed a recovery method, update it using the available account settings. Also check whether other devices or sessions still have access to your account and sign out or deregister unfamiliar ones where the relevant option is available.

Check Your Devices for Suspicious Activity

If you suspect that malware or a suspicious browser extension was involved, update your computer and phone, remove untrusted extensions and apps, and run a scan using reputable security software.

Avoid entering your new password on a device you believe may be compromised. Use a trusted device to change your credentials and complete recovery whenever possible.

Protect Your Email and Phone Number

Your Amazon account is only as secure as the recovery methods connected to it.

Use a unique email password, enable two-factor authentication on your email account, and check the recovery details associated with your inbox.

If your phone unexpectedly loses service or you suspect someone has taken control of your number, contact your mobile carrier. Ask them to investigate and help protect your number against unauthorized changes.

Check for Unauthorized Orders, Payments, and Amazon Prime Activity

Once your login is secure, investigate what the intruder may have done. Don't stop after checking the main order-history page.

Review your purchases, account information, and subscriptions to identify suspicious changes.

1. Review Your Order History

Go to Your Orders and look for unfamiliar purchases, recently canceled orders, or transactions that you cannot explain.

If an unauthorized order has not shipped, check whether Amazon allows you to cancel it. Contact customer service immediately if you cannot cancel it yourself.

If your account offers an Archived Orders section, review that as well. Also check digital orders, returns, and other relevant purchase histories.

An archived order isn't automatically fraudulent, but it is worth examining if you suspect someone has accessed your account.

If suspicious activity appears alongside canceled purchases, my guide on why Amazon keeps canceling orders and how to fix it may help you understand the difference between ordinary order problems and potential account-security concerns.

2. Inspect Your Shipping Addresses and Personal Details

Open Your Addresses and remove any unfamiliar shipping locations after checking whether they belong to someone you authorized to use the account.

Review your contact details and any other account information that the intruder could have modified.

If an unauthorized order was sent to an unfamiliar address, record the order number, delivery status, and available transaction information before contacting Amazon.

3. Check Your Saved Payment Methods and Bank Statements

Open Your Payments and inspect your saved payment methods and available transaction information. Look for unfamiliar cards or payment changes.

Then check the bank or credit card accounts linked to Amazon for charges you cannot match to legitimate activity.

Amazon generally masks full payment-card numbers in the account interface, but that does not make a compromised account harmless.

Someone who gains access may still be able to use an eligible saved payment method to place unauthorized orders.

If you see a charge that you don't recognize, investigate it before assuming it is fraudulent. For more information, read my guide to the Amazon Prime PMTS charge and how to identify an unfamiliar Amazon payment.

4. Review Amazon Prime and Other Digital Subscriptions

Check your Amazon Prime membership, Prime Video subscriptions, digital purchases, and any other services associated with your account. Look for changes or transactions you did not authorize.

An unexpected recurring charge does not always mean that a hacker is responsible. It could be a legitimate membership renewal or an existing subscription.

Compare the transaction date and amount with your account records before deciding what to do.

If you identify an unauthorized membership change or subscription, contact Amazon to ask about the available cancellation and refund options.

Who Do I Call? How Do I Contact Amazon About a Hacked Account?

If you're asking, "Who do I call if my Amazon account has been hacked?" the safest starting point is Amazon's official Customer Service page.

Amazon provides support options that can include phone, chat, and self-service assistance, depending on the issue and available options.

Visit the official Amazon Customer Service page and select the issue that best matches your situation. If you cannot sign in, explain that your account may have been compromised and that you need help recovering access.

When contacting support, be ready to explain:

• Whether you can still sign in.
• Whether your password, email address, or phone number changed without permission.
• Whether you found unfamiliar purchases or payment activity.
• What recovery steps you have already tried.

Keep relevant order details and support case numbers for your records. Never send your password or disclose a one-time sign-in code to someone who contacts you unexpectedly and claims to be Amazon support.

Be careful with fake customer-service numbers. Avoid relying on phone numbers from unsolicited messages, social media posts, or suspicious search advertisements.

Scammers sometimes impersonate Amazon support and promise account recovery in exchange for money or access to your device.

If your account is registered with Amazon UK rather than Amazon.com, use the official support process for the marketplace where your account is registered. Make sure you're contacting the correct regional service.

Can You Get Your Money Back for Unauthorized Amazon Purchases?

You may be able to recover money lost through unauthorized Amazon purchases, but a refund is not automatic in every case.

The outcome depends on the transaction, the evidence available, Amazon's review, and the policies that apply to your payment method.

Start by reporting the unauthorized activity to Amazon. Explain that the purchase was made without your permission and request an investigation.

Keep copies of relevant order details, transaction records, and support communications.

At the same time, contact your bank or credit card issuer promptly if you find an unfamiliar charge. Use the telephone number on the back of your card or the official banking app or website.

Ask the issuer whether you should lock or replace your card, dispute the transaction, or take other protective measures.

If your debit card or bank account may be compromised, report the issue immediately because reporting deadlines and protections can differ depending on the transaction and circumstances.

Do not assume that reporting the incident to Amazon automatically resolves a charge with your bank. Follow both organizations' instructions and keep the relevant reference numbers.

How Did Someone Hijack My Amazon Account?

Knowing how an account was compromised can help you prevent it from happening again. There isn't always one obvious explanation, but several common situations can put an Amazon account at risk.

1. You Reused a Password From Another Website

If you used the same password on Amazon and another service that suffered a data breach, a criminal may try those leaked credentials on other websites.

This is why every important account should have its own password.

2. You Entered Your Details on a Fake Amazon Page

Phishing emails and text messages can imitate delivery updates, account warnings, refunds, and payment problems.

A fake page may look convincing enough to trick you into entering your password or verification code.

Always open Amazon directly through its official app or by typing the website address yourself when checking an urgent account alert.

3. Someone Gained Access to Your Email Account

If a criminal controls your email inbox, they may be able to intercept password-reset messages or account notifications.

That's why securing the email address connected to Amazon is just as important as changing your Amazon password.

4. Your Device or Browser May Be Compromised

Malware, malicious browser extensions, or an unsecured shared device can expose account information. In some cases, attackers may steal active login sessions rather than simply guessing a password.

If you suspect a device is compromised, use a trusted device for account recovery and investigate the suspicious software before signing in again.

5. Someone Had Access to Your Phone or a Shared Device

An unlocked phone, an old device that remains registered, or a computer shared with other people can create opportunities for unauthorized access.

Review your registered devices and make sure you control the devices and recovery methods connected to your account.

How to Prevent Your Amazon Account From Being Hacked Again

After recovering your account, take a few additional precautions. They won't eliminate every possible threat, but they can make it much harder for someone to access your account again.

• Use a unique password. Never reuse your Amazon password on another service. A reputable password manager can help you create and store strong passwords.
• Enable Two-Step Verification. Use an authenticator app or another secure method offered by Amazon. Consider a passkey if it is available for your account and device.
• Secure your email account. Enable two-factor authentication and review your recovery details and active sessions.
• Check account activity regularly. Review orders, payment methods, addresses, digital purchases, and membership changes.
• Keep your devices updated. Install security updates and remove software or browser extensions that you don't trust.
• Ignore suspicious messages. Don't click unexpected account-security links or share verification codes with people who contact you.
• Protect your mobile number. Contact your carrier if you notice suspicious changes or unexpected loss of service.

You don't need to check every security setting every day, but you should take unexpected account alerts seriously. The sooner you recognize unauthorized access, the sooner you can limit the potential damage.

Frequently Asked Questions

Can a hacker see my full credit card number on Amazon?

Amazon generally masks saved payment-card numbers in its account interface, showing only limited card details such as the last four digits.

However, a hacker who gains access may still be able to place purchases using an eligible saved payment method. Contact your bank or card issuer if you suspect that your payment information has been misused.

Does changing my Amazon password log everyone out?

You should not assume that changing your password ends every existing session on every device.

After changing it, review Amazon's available sign-out options and deregister unfamiliar Amazon devices through Manage Your Content and Devices.

If you still suspect unauthorized access, ask Amazon Customer Service for additional guidance.

Why did Amazon lock my account after it was hacked?

Amazon may restrict access or request additional verification when it detects activity that raises security concerns.

This can be intended to protect your account, but a lock does not by itself prove that your account was hacked.

Follow the verification instructions displayed through Amazon's official website or contact customer service if you cannot complete them.

Can someone use my hacked Amazon account to access Prime Video or Kindle?

Potentially. Amazon services and registered devices may be linked to the same account, so unauthorized access can affect more than shopping orders.

Check digital purchases, subscriptions, and registered devices, and remove or deregister anything you don't recognize where the relevant option is available.

Can someone hack my Amazon account if they only know my email address?

Knowing your email address alone does not normally give someone access to your account. However, it can help a criminal target you with phishing attempts or try credentials leaked from another service.

Use a unique password, enable Two-Step Verification, and secure the email account associated with Amazon.

Should I close my Amazon account after it has been hacked?

Don't rush to close it before addressing the security breach, unauthorized transactions, and any pending refund or dispute.

First, try to recover your account, secure your information, and work with Amazon and your bank to resolve the incident.

Consider closing the account only after understanding the consequences and available alternatives.

Final Thoughts

Finding out that your Amazon account has been hacked is stressful, especially when your payment details, home address, and order history may be involved. But you don't have to solve everything at once.

Start by regaining control of your login and securing your email account. Then enable Two-Step Verification, review your devices and account details, investigate unfamiliar orders and subscriptions, and contact your bank if you discover unauthorized charges.

Most importantly, use Amazon's official recovery and customer-service channels. Don't trust strangers who promise instant account recovery, and never give anyone your password or sign-in verification codes.

Taking these steps can help you regain control, limit further damage, and make your Amazon account more secure going forward.