Scam - Phishing or Genuine email?
Any help much appreciated.
Email sent to email address.
Not sent to seller central account
No flags or concerns in account health
- Any idea why they would be phishing for my last 4 digits of the phone number?
- Please check the reply to and from email addresses at the end of this message and advise if you think they are legitimate??
A critical event has occurred with your account that has caused it to be at risk of deactivation.
We have decided that you may sell on Amazon.co.uk while we work with you to address this issue.
To continue using our services, follow the steps below to prevent unnecessary disruption to your selling account.
-
Update the phone number listed under “Emergency Notifications” at this link (https://sellercentral-europe.amazon.com/notifications/preferences).
Alternatively, in Seller Central go to Settings and choose Notification Preferences. Locate the Emergency Notifications section at the bottom and click “Edit”. Fill in all the required information, then click Save. -
Action required: Reply to this notice and include the last 4 digits of the phone number listed, as confirmation.
What happens next?
Once we have received your confirmation email, we will review your account to determine if you may sell on Amazon.co.uk. Otherwise, we might ask for additional information.
Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon. com {Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices. co. uk{Moderator edit(Jessica): edited URL}>
Scam - Phishing or Genuine email?
Any help much appreciated.
Email sent to email address.
Not sent to seller central account
No flags or concerns in account health
- Any idea why they would be phishing for my last 4 digits of the phone number?
- Please check the reply to and from email addresses at the end of this message and advise if you think they are legitimate??
A critical event has occurred with your account that has caused it to be at risk of deactivation.
We have decided that you may sell on Amazon.co.uk while we work with you to address this issue.
To continue using our services, follow the steps below to prevent unnecessary disruption to your selling account.
-
Update the phone number listed under “Emergency Notifications” at this link (https://sellercentral-europe.amazon.com/notifications/preferences).
Alternatively, in Seller Central go to Settings and choose Notification Preferences. Locate the Emergency Notifications section at the bottom and click “Edit”. Fill in all the required information, then click Save. -
Action required: Reply to this notice and include the last 4 digits of the phone number listed, as confirmation.
What happens next?
Once we have received your confirmation email, we will review your account to determine if you may sell on Amazon.co.uk. Otherwise, we might ask for additional information.
Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon. com {Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices. co. uk{Moderator edit(Jessica): edited URL}>
11 replies
Seller_esvgLzKXw2YAl
It actually looks legit.
However, the reply to looks dodgy.
Personally I wouldn’t trust any kind of email like this, verify with support if not sure, but don’t use any links in emails anyway as a general rule.
Seller_Fn2OUUkqfC9si
Authentication-Results: spf=fail (sender IP is 146.20.161.87) smtp.mailfrom=amazonservices.co.uk; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=amazonservices .co. uk {Moderator edit(Jessica): edited URL};compauth=fail reason=001 Received-SPF: Fail (protection.outlook.com: domain of amazonservices. co. uk {Moderator edit(Jessica): edited URL} does not designate 146.20.161.87 as permitted sender) receiver=protection.outlook.com; client-ip=146.20.161.87; helo=smtp87.iad3b.emailsrvr.com; Received: from smtp87.iad3b.emailsrvr.com (146.20.161.87) by VI1EUR04FT043.mail.protection.outlook.com (10.152.29.43) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Wed, 8 Jul 2020 10:56:23 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:0C12786F34745EAEAE97BB9DC21DA0C2072B803C3D87B0A92608BF621B1C5FC1;UpperCasedChecksum:25264FC74DD7E0277CE5CF6844D9145C71FA0B5A3544B59D49BCB0BFFDF3D10F;SizeAsReceived:740;Count:13 X-Auth-ID: amazon@housershoes{Moderator edit(Jessica): edited URL} Received: by smtp19.relay.iad3b.emailsrvr.com (Authenticated sender: amazon-AT-housershoes.{Moderator edit(Jessica): edited URL}) with ESMTPSA id DC049401DE for <>; Wed, 8 Jul 2020 06:56:21 -0400 (EDT) Message-ID: <045b3422-44020-01d21641448495@desktop-d463h6d> Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon{Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices{Moderator edit(Jessica): edited URL}> To @:hotmail.co.uk Subject: Recent changes to your Amazon.co.uk account Date: Wed, 8 Jul 2020 03:55:22 -0700
Seller_l78koE9kGCu59
Glad I found this thread - I was getting worried!
I’ve had the same email and noticed the end of the email address (I’ve reported it as phishing now and deleted it) had a random code and numbers that didn’t look right in an official email.
I searched for “other emails from this sender” = 0
I checked the email address as mentioned above = looks dodgy
I checked my seller account and even the setting mentioned = nothing showing that needs attention
and finally the thing that cemented it for me as a scam email was the need to reply to them via email.
It has to be a scam - cleverly they direct you twoeard not clicking links and to actually log into your Seller Central account to make the changes but the last line exposed them.
…unless I’m wrong? 
Seller_LKjg1QRrO36Yq
[quote=“QBD_Watches, post:1, topic:312003”]
You should delete those live links or delete your entire post if it’s too late to edit it.
The URl with ‘A143APDNL’ in it appears to be a spoof address.
I did an ICANN Whois search and it was registered only in October last year and does not belong to Amazon.
So almost 100% a phishing site.
Seller_l78koE9kGCu59
That was the bit that first made me suspicious.
Seller_LKjg1QRrO36Yq
It’s a pity but I think this entire thread will have to be deleted if people don’t quickly delete or disable those malicious links
Seller_LKjg1QRrO36Yq
I’ve reported this thread to the mods.
Hopefully they can edit out the suspicious links…
Seller_Fn2OUUkqfC9si
Thanks everyone.
Post has been modified by Jessica
Has been confirmed as phishing by Seller Support.
Have a good day and stay safe
Thanks
Scam - Phishing or Genuine email?
Any help much appreciated.
Email sent to email address.
Not sent to seller central account
No flags or concerns in account health
- Any idea why they would be phishing for my last 4 digits of the phone number?
- Please check the reply to and from email addresses at the end of this message and advise if you think they are legitimate??
A critical event has occurred with your account that has caused it to be at risk of deactivation.
We have decided that you may sell on Amazon.co.uk while we work with you to address this issue.
To continue using our services, follow the steps below to prevent unnecessary disruption to your selling account.
-
Update the phone number listed under “Emergency Notifications” at this link (https://sellercentral-europe.amazon.com/notifications/preferences).
Alternatively, in Seller Central go to Settings and choose Notification Preferences. Locate the Emergency Notifications section at the bottom and click “Edit”. Fill in all the required information, then click Save. -
Action required: Reply to this notice and include the last 4 digits of the phone number listed, as confirmation.
What happens next?
Once we have received your confirmation email, we will review your account to determine if you may sell on Amazon.co.uk. Otherwise, we might ask for additional information.
Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon. com {Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices. co. uk{Moderator edit(Jessica): edited URL}>
Scam - Phishing or Genuine email?
Any help much appreciated.
Email sent to email address.
Not sent to seller central account
No flags or concerns in account health
- Any idea why they would be phishing for my last 4 digits of the phone number?
- Please check the reply to and from email addresses at the end of this message and advise if you think they are legitimate??
A critical event has occurred with your account that has caused it to be at risk of deactivation.
We have decided that you may sell on Amazon.co.uk while we work with you to address this issue.
To continue using our services, follow the steps below to prevent unnecessary disruption to your selling account.
-
Update the phone number listed under “Emergency Notifications” at this link (https://sellercentral-europe.amazon.com/notifications/preferences).
Alternatively, in Seller Central go to Settings and choose Notification Preferences. Locate the Emergency Notifications section at the bottom and click “Edit”. Fill in all the required information, then click Save. -
Action required: Reply to this notice and include the last 4 digits of the phone number listed, as confirmation.
What happens next?
Once we have received your confirmation email, we will review your account to determine if you may sell on Amazon.co.uk. Otherwise, we might ask for additional information.
Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon. com {Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices. co. uk{Moderator edit(Jessica): edited URL}>
Scam - Phishing or Genuine email?
Any help much appreciated.
Email sent to email address.
Not sent to seller central account
No flags or concerns in account health
- Any idea why they would be phishing for my last 4 digits of the phone number?
- Please check the reply to and from email addresses at the end of this message and advise if you think they are legitimate??
A critical event has occurred with your account that has caused it to be at risk of deactivation.
We have decided that you may sell on Amazon.co.uk while we work with you to address this issue.
To continue using our services, follow the steps below to prevent unnecessary disruption to your selling account.
-
Update the phone number listed under “Emergency Notifications” at this link (https://sellercentral-europe.amazon.com/notifications/preferences).
Alternatively, in Seller Central go to Settings and choose Notification Preferences. Locate the Emergency Notifications section at the bottom and click “Edit”. Fill in all the required information, then click Save. -
Action required: Reply to this notice and include the last 4 digits of the phone number listed, as confirmation.
What happens next?
Once we have received your confirmation email, we will review your account to determine if you may sell on Amazon.co.uk. Otherwise, we might ask for additional information.
Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon. com {Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices. co. uk{Moderator edit(Jessica): edited URL}>
11 replies
11 replies
Seller_esvgLzKXw2YAl
It actually looks legit.
However, the reply to looks dodgy.
Personally I wouldn’t trust any kind of email like this, verify with support if not sure, but don’t use any links in emails anyway as a general rule.
Seller_Fn2OUUkqfC9si
Authentication-Results: spf=fail (sender IP is 146.20.161.87) smtp.mailfrom=amazonservices.co.uk; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=amazonservices .co. uk {Moderator edit(Jessica): edited URL};compauth=fail reason=001 Received-SPF: Fail (protection.outlook.com: domain of amazonservices. co. uk {Moderator edit(Jessica): edited URL} does not designate 146.20.161.87 as permitted sender) receiver=protection.outlook.com; client-ip=146.20.161.87; helo=smtp87.iad3b.emailsrvr.com; Received: from smtp87.iad3b.emailsrvr.com (146.20.161.87) by VI1EUR04FT043.mail.protection.outlook.com (10.152.29.43) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Wed, 8 Jul 2020 10:56:23 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:0C12786F34745EAEAE97BB9DC21DA0C2072B803C3D87B0A92608BF621B1C5FC1;UpperCasedChecksum:25264FC74DD7E0277CE5CF6844D9145C71FA0B5A3544B59D49BCB0BFFDF3D10F;SizeAsReceived:740;Count:13 X-Auth-ID: amazon@housershoes{Moderator edit(Jessica): edited URL} Received: by smtp19.relay.iad3b.emailsrvr.com (Authenticated sender: amazon-AT-housershoes.{Moderator edit(Jessica): edited URL}) with ESMTPSA id DC049401DE for <>; Wed, 8 Jul 2020 06:56:21 -0400 (EDT) Message-ID: <045b3422-44020-01d21641448495@desktop-d463h6d> Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon{Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices{Moderator edit(Jessica): edited URL}> To @:hotmail.co.uk Subject: Recent changes to your Amazon.co.uk account Date: Wed, 8 Jul 2020 03:55:22 -0700
Seller_l78koE9kGCu59
Glad I found this thread - I was getting worried!
I’ve had the same email and noticed the end of the email address (I’ve reported it as phishing now and deleted it) had a random code and numbers that didn’t look right in an official email.
I searched for “other emails from this sender” = 0
I checked the email address as mentioned above = looks dodgy
I checked my seller account and even the setting mentioned = nothing showing that needs attention
and finally the thing that cemented it for me as a scam email was the need to reply to them via email.
It has to be a scam - cleverly they direct you twoeard not clicking links and to actually log into your Seller Central account to make the changes but the last line exposed them.
…unless I’m wrong?
Seller_LKjg1QRrO36Yq
[quote=“QBD_Watches, post:1, topic:312003”]
You should delete those live links or delete your entire post if it’s too late to edit it.
The URl with ‘A143APDNL’ in it appears to be a spoof address.
I did an ICANN Whois search and it was registered only in October last year and does not belong to Amazon.
So almost 100% a phishing site.
Seller_l78koE9kGCu59
That was the bit that first made me suspicious.
Seller_LKjg1QRrO36Yq
It’s a pity but I think this entire thread will have to be deleted if people don’t quickly delete or disable those malicious links
Seller_LKjg1QRrO36Yq
I’ve reported this thread to the mods.
Hopefully they can edit out the suspicious links…
Seller_Fn2OUUkqfC9si
Thanks everyone.
Post has been modified by Jessica
Has been confirmed as phishing by Seller Support.
Have a good day and stay safe
Thanks
Seller_esvgLzKXw2YAl
It actually looks legit.
However, the reply to looks dodgy.
Personally I wouldn’t trust any kind of email like this, verify with support if not sure, but don’t use any links in emails anyway as a general rule.
Seller_esvgLzKXw2YAl
It actually looks legit.
However, the reply to looks dodgy.
Personally I wouldn’t trust any kind of email like this, verify with support if not sure, but don’t use any links in emails anyway as a general rule.
Seller_Fn2OUUkqfC9si
Authentication-Results: spf=fail (sender IP is 146.20.161.87) smtp.mailfrom=amazonservices.co.uk; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=amazonservices .co. uk {Moderator edit(Jessica): edited URL};compauth=fail reason=001 Received-SPF: Fail (protection.outlook.com: domain of amazonservices. co. uk {Moderator edit(Jessica): edited URL} does not designate 146.20.161.87 as permitted sender) receiver=protection.outlook.com; client-ip=146.20.161.87; helo=smtp87.iad3b.emailsrvr.com; Received: from smtp87.iad3b.emailsrvr.com (146.20.161.87) by VI1EUR04FT043.mail.protection.outlook.com (10.152.29.43) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Wed, 8 Jul 2020 10:56:23 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:0C12786F34745EAEAE97BB9DC21DA0C2072B803C3D87B0A92608BF621B1C5FC1;UpperCasedChecksum:25264FC74DD7E0277CE5CF6844D9145C71FA0B5A3544B59D49BCB0BFFDF3D10F;SizeAsReceived:740;Count:13 X-Auth-ID: amazon@housershoes{Moderator edit(Jessica): edited URL} Received: by smtp19.relay.iad3b.emailsrvr.com (Authenticated sender: amazon-AT-housershoes.{Moderator edit(Jessica): edited URL}) with ESMTPSA id DC049401DE for <>; Wed, 8 Jul 2020 06:56:21 -0400 (EDT) Message-ID: <045b3422-44020-01d21641448495@desktop-d463h6d> Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon{Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices{Moderator edit(Jessica): edited URL}> To @:hotmail.co.uk Subject: Recent changes to your Amazon.co.uk account Date: Wed, 8 Jul 2020 03:55:22 -0700
Seller_Fn2OUUkqfC9si
Authentication-Results: spf=fail (sender IP is 146.20.161.87) smtp.mailfrom=amazonservices.co.uk; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=amazonservices .co. uk {Moderator edit(Jessica): edited URL};compauth=fail reason=001 Received-SPF: Fail (protection.outlook.com: domain of amazonservices. co. uk {Moderator edit(Jessica): edited URL} does not designate 146.20.161.87 as permitted sender) receiver=protection.outlook.com; client-ip=146.20.161.87; helo=smtp87.iad3b.emailsrvr.com; Received: from smtp87.iad3b.emailsrvr.com (146.20.161.87) by VI1EUR04FT043.mail.protection.outlook.com (10.152.29.43) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Wed, 8 Jul 2020 10:56:23 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:0C12786F34745EAEAE97BB9DC21DA0C2072B803C3D87B0A92608BF621B1C5FC1;UpperCasedChecksum:25264FC74DD7E0277CE5CF6844D9145C71FA0B5A3544B59D49BCB0BFFDF3D10F;SizeAsReceived:740;Count:13 X-Auth-ID: amazon@housershoes{Moderator edit(Jessica): edited URL} Received: by smtp19.relay.iad3b.emailsrvr.com (Authenticated sender: amazon-AT-housershoes.{Moderator edit(Jessica): edited URL}) with ESMTPSA id DC049401DE for <>; Wed, 8 Jul 2020 06:56:21 -0400 (EDT) Message-ID: <045b3422-44020-01d21641448495@desktop-d463h6d> Reply-To: “Seller Central Notifications” <seller-notification@A143APDNL-amazon{Moderator edit(Jessica): edited URL}> From: “Seller Central Notifications” <seller-notification@amazonservices{Moderator edit(Jessica): edited URL}> To @:hotmail.co.uk Subject: Recent changes to your Amazon.co.uk account Date: Wed, 8 Jul 2020 03:55:22 -0700
Seller_l78koE9kGCu59
Glad I found this thread - I was getting worried!
I’ve had the same email and noticed the end of the email address (I’ve reported it as phishing now and deleted it) had a random code and numbers that didn’t look right in an official email.
I searched for “other emails from this sender” = 0
I checked the email address as mentioned above = looks dodgy
I checked my seller account and even the setting mentioned = nothing showing that needs attention
and finally the thing that cemented it for me as a scam email was the need to reply to them via email.
It has to be a scam - cleverly they direct you twoeard not clicking links and to actually log into your Seller Central account to make the changes but the last line exposed them.
…unless I’m wrong?
Seller_l78koE9kGCu59
Glad I found this thread - I was getting worried!
I’ve had the same email and noticed the end of the email address (I’ve reported it as phishing now and deleted it) had a random code and numbers that didn’t look right in an official email.
I searched for “other emails from this sender” = 0
I checked the email address as mentioned above = looks dodgy
I checked my seller account and even the setting mentioned = nothing showing that needs attention
and finally the thing that cemented it for me as a scam email was the need to reply to them via email.
It has to be a scam - cleverly they direct you twoeard not clicking links and to actually log into your Seller Central account to make the changes but the last line exposed them.
…unless I’m wrong?
Seller_LKjg1QRrO36Yq
[quote=“QBD_Watches, post:1, topic:312003”]
You should delete those live links or delete your entire post if it’s too late to edit it.
The URl with ‘A143APDNL’ in it appears to be a spoof address.
I did an ICANN Whois search and it was registered only in October last year and does not belong to Amazon.
So almost 100% a phishing site.
Seller_LKjg1QRrO36Yq
[quote=“QBD_Watches, post:1, topic:312003”]
You should delete those live links or delete your entire post if it’s too late to edit it.
The URl with ‘A143APDNL’ in it appears to be a spoof address.
I did an ICANN Whois search and it was registered only in October last year and does not belong to Amazon.
So almost 100% a phishing site.
Seller_l78koE9kGCu59
That was the bit that first made me suspicious.
Seller_l78koE9kGCu59
That was the bit that first made me suspicious.
Seller_LKjg1QRrO36Yq
It’s a pity but I think this entire thread will have to be deleted if people don’t quickly delete or disable those malicious links
Seller_LKjg1QRrO36Yq
It’s a pity but I think this entire thread will have to be deleted if people don’t quickly delete or disable those malicious links
Seller_LKjg1QRrO36Yq
I’ve reported this thread to the mods.
Hopefully they can edit out the suspicious links…
Seller_LKjg1QRrO36Yq
I’ve reported this thread to the mods.
Hopefully they can edit out the suspicious links…
Seller_Fn2OUUkqfC9si
Thanks everyone.
Post has been modified by Jessica
Has been confirmed as phishing by Seller Support.
Have a good day and stay safe
Thanks
Seller_Fn2OUUkqfC9si
Thanks everyone.
Post has been modified by Jessica
Has been confirmed as phishing by Seller Support.
Have a good day and stay safe
Thanks
