One of the year’s biggest shopping events, Amazon Prime Day, begins on July 8 and shoppers worldwide are already preparing. Cybercriminals are preparing too. IT security firm Check Point Software is warning eager shoppers to stay vigilant ahead of this retail event.
Phishing attacks are already targeting unsuspecting buyers. During June alone, more than 1,000 new domains resembling Amazon have appeared online. Of these, 87 percent have been flagged as malicious or suspicious. Several domains include the term “Amazon Prime”, with one in 81 marked as risky.
Major shopping days like Amazon Prime Day are magnets for online fraud, and cybercriminals step up efforts using two main tactics: fake websites crafted to mimic the appearance of the official Amazon site and phishing emails that create a false sense of urgency. These lures trick unsuspecting victims into clicking malicious links. Through these techniques, attackers can steal login credentials, personal data, and make unauthorized purchases.
“While millions of shoppers worldwide are getting ready to score deals, they also become attractive targets for malicious actors,” says Oskar Rödin, security expert at Check Point Software. “Shoppers should stay alert, trust their instincts, and be wary of tactics that pressure them into making quick decisions.”
Take these steps to protect yourself and your personal information:
- Shop directly through the retailer’s official website
- Avoid clicking links in emails that claim to be legitimate
- Double-check URLs and don’t trust offers that seem too good to be true
- Use strong passwords and enable two-factor authentication
Read more on Check Point’s blog: https://blog.checkpoint.com/research/amazon-prime-day-2025-deals-await-but-so-do-the-cyber-criminals-2/