Customers who made purchases on Amazon in March are being alerted to a deceptive new scam that falsely claims a “product recall” has been initiated. The concerning text message, received on UK phones, starts with a notification stating “Amazon Product Recall Notice.”
The message then goes on to promise a full refund to recipients and urges them to click on a link to log in to their Amazon accounts. It even directs individuals to stop using the product immediately, adding a sense of urgency.
The message, as reported by Mirror Online, informs recipients, “Dear Customer, we are writing to inform you of a product recall affecting an item from your March 2026 order due to a design defect that may pose a potential safety risk. We apologize for any inconvenience this may cause and appreciate your prompt attention to this important safety matter. Thank you for your continued trust in Amazon.”
While this may sound alarming, there is no actual product recall. The message is a phishing scam aimed at tricking concerned customers into divulging their login details, which could lead to unauthorized access to their accounts, fraudulent purchases, or data breaches.
Although this scam is newly emerging, it is not the first time Amazon customers have been targeted. A similar warning was issued by consumer group Which? in February after cybercriminals circulated messages claiming a product had been recalled “for safety reasons,” with links to a fraudulent Amazon page.
In a statement to Which?, Amazon cautioned, “There are various scams that request payments via email, phone, or text for items or services. Be cautious whenever there is pressure to act immediately, as scammers often create a sense of urgency and employ convincing tactics to deceive consumers. We encourage consumers to report suspected scams to safeguard their accounts and alert law enforcement.”
Amazon also advises customers to exercise caution with unfamiliar phone numbers, unexpected order or delivery messages, and links containing misspellings, unusual formatting, or using IP addresses instead of standard web addresses.