Amazon customers received a series of false email confirmations on October 1, 2023, thanking them for their purchases of Google Play, Mastercard, and Hotels.com gift cards. However, many customers had never made these purchases.
The emails were sent in error due to a system glitch, and Amazon has since apologized for the inconvenience. Customers who received the false emails do not need to take any further action.
The email headers showed that the emails were sent using Amazon Simple Email Service (SES) and passed DKIM and SPF authentication headers, indicating that the emails were verified as coming from Amazon.
While Amazon’s media contact has not responded to queries about the emails, a support agent told BleepingComputer that they were sent to all customers in error.
