NordVPN Uncovers 120K Fake Amazon Sites Ahead of Prime Day 2025

Amazon shoppers, beware. 

Crooks have spun up over 120,000 fake Amazon sites ahead of Prime Day 2025.

NordVPN’s Threat Protection Pro platform has detected the startling surge of fraud domains mimicking Amazon, just days before the global event, which takes place from July 8 to 11.

According to Vilius Kardelis from Nord Security, 92,000 of these domains were designed to phish credentials, 21,000 to install malware, and 11,000 to hawk fake or non-existent goods.

Marijus Briedis, NordVPN CTO, believes that major shopping events like Prime Day make "perfect storms for cybercriminals."

“Scammers know that shoppers’ excitement and urgency around limited-time deals make them more susceptible to clicking on malicious links or sharing personal information without proper verification," he explained in a statement.

Cybersecurity is getting more complicated this year, as generative AI now helps fraudsters craft delivery notices sounding personal and urgent, all without spelling mistakes or awkward phrasing.

The State of Scams 

Polyguard co-founder Joshua McKenty calls this new wave of scams “Nemesis Prime," as they've become deeply convincing via voice, text, or email saying your account’s expiring or needs verification.

"These scams aren’t last year’s models, so don’t expect spelling mistakes or funky attachments," he shared.

"They may know your name, your address — even your shoe size!"

Amazon and cybersecurity firms have already ramped up defenses, and media outlets are issuing public warnings.

In 2024, Amazon shut down over 55,000 phishing sites and 12,000 fake support numbers. 

The company emphasizes that it will never ask for payments via email, phone, or gift cards.

Security experts add that suspicious messages often follow a pattern, using vague greetings, urgent language, strange URLs, and requests for sensitive info.

Yet, the threats keep evolving.

Dr. Darren Williams of BlackFog says Prime Day now triggers spikes in ransomware attacks and spoofed Amazon domains.

"These threats don’t just exploit individual shoppers; they compromise trust in digital infrastructure," he adds.

And according to Julien Richard, VP of InfoSec at Lastwall, phishing scams today know how to not look like scams.

They do this by mimicking Amazon’s tone and timing "not to sound perfect, just believable enough."

Ultimately, they slip in during the Prime Day frenzy when people are distracted and rushing to check out their purchases.

How Scammers Work and How to Beat Them

Prime Day brings deals, but it also brings danger.

Fake Amazon sites are out in full force, designed to trick shoppers with lookalike pages and too-good-to-be-true offers.

From what we know, some sites phish for login info, while others push malware disguised as tracking tools or receipts. 

Scammers also use urgent messages about refunds or account issues to lure people into clicking before they think.

On the bright side, staying safe doesn’t require expansive technical know-how as you may think.

You just need to practice a few practical habits. Here’s what we recommend:

• Use only the official Amazon app or website. Don’t trust links from emails, texts, or ads — even if they look legit.
• Turn on two-factor authentication and use strong, unique passwords to make your account harder to breach.
• Slow down before you click. If a message feels rushed, urgent, or slightly off, it probably is.
• Use virtual cards or PayPal for added security, especially when shopping on your phone.
• Check your bank and credit card statements regularly so you can flag unauthorized charges fast.
• Keep your antivirus and devices updated to catch malware before it spreads.
• Always double-check the URL. Watch out for subtle misspellings or strange domains like “.top” or “.store.”

Following these steps helps you shop smart and avoid falling victim to phishing, malware, or fake goods while you chase deals.

Our Take: What Should Amazon Shoppers Ask Themselves?

I believe the rise in scams is a wake‑up call for everyone. As much as these deals excite us, scammers are leveling up too.

It’s not enough to say, “Don’t get scammed," because we need simple guardrails built into the shopping experience.

I’d love to see Amazon roll out in‑app scam warnings or trusted‑seller badges for those they've vetted.

As a shopper, I’m ready to pay a tiny premium for peace of mind, and with all that's happening, I suspect many feel the same.

See how top teams keep businesses safe online. Check out the top cybersecurity agencies: