Fake Amazon Cancellation Email Hides Canadian Pharmacy Spam Links

The Internet Patrol default featured image
Share the knowledge

Not content with sending fake Amazon confirmation emails, the outfit sending out the Canadian pharmacy spam is now sending out fake Amazon.com order cancellation emails, too, claiming that your Amazon order has been cancelled. “Amazon.com – Your Cancellation (0046-68878-96071)” says the email’s subject (although the “order number” may change) – but of course the link to check “ORDER INFORMATION” really takes you to a Canadian pharmacy spam site, hawking Viagra, Cialis and the like. In the example below, the fake cancellation contains links to dinnerinperu[dot]com/quadratical, which redirects to https://web.archive.org/web/20110421034707/http://weightbreezy.com:80/, which is a Canadian pharmacy spam site.

The spam, in full, reads:

Subject: Amazon.com – Your Cancellation (0046-68878-96071)
Date: March 7, 2010 10:17:22 PM MST

Dear Customer,

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

Your order has been successfully canceled. For your reference, here`s a summary
of your order:

You just canceled order #427-36356-9898759

Status: CANCELED

_____________________________________________________________________

ORDER INFORMATION
Sold by: Amazon.com, LLC

_____________________________________________________________________

Because you only pay for items when we ship them to you, you won`t be charged
for any items that you cancel.

Thank you for visiting Amazon.com!

———————————————————————
Amazon.com
Earth`s Biggest Selection
http://www.amazon.com
———————————————————————

As we mentioned in our article last week about the fake Amazon.com confirmation emails, this round of spam also uses masked links that make you think that the link will take you to Amazon so you can figure out just what the heck order they are talking about. But in reality, these cloaked links take you to one of the Canadian pharmacy spam sites that are behind this spam effort.

If you are careful, you can hover over the link with your cursor, and any current browser should reveal the actual site link. As you can see in this image below, we hovered over the link, and found that the link in this Amazon.com cancellation phishing spam really goes to a page called “DinnerInPeru.com/quadratical.html” and that page, in turn, goes to the Canadian pharmacy spam site, called “weightbreezy.com/” (Spammers register hundreds of nonsense-named sites on which to host their wares, knowing that their sites will get taken down as soon as they are discovered by either the ISP or the authorities.)

fake-amazon-cancellation

weightbreezy-spam-site

As always, if you get an email that claims to be from Amazon, Paypal, eBay, or one of the other big sites, instead of clicking on the links in the email, just log into the site and go to your account. If they really are trying to reach you, there will be a notice in your account.

Get New Internet Patrol Articles by Email!

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

 


Share the knowledge

13 thoughts on “Fake Amazon Cancellation Email Hides Canadian Pharmacy Spam Links

  1. Here’s a copy of one of the Fake Amazon Cancellation Emails, that i received:

    Dear Customer,

    Your order has been successfully canceled. For your reference, here’s a summary of your order:

    You just canceled order 151-671-75147 placed on May 6, 2012.

    Status: CANCELED

    _____________________________________________________________________

    1 “Indefiniteness”; 2009, Deluxe Edition
    By: Julian Murphy

    Sold by: Amazon.com LLC

    _____________________________________________________________________

    Thank you for visiting Amazon.com!

  2. I also have two in my yahoo email in the last three days. Thank You theinternetpatrol for sharing this. Now I’m not worried that my credit card accounts hacked!

  3. Got two of these today. The funny thing is the e-mail says I placed the order tomorrow.

  4. Funny thing about this is I received two of these this past week and I don’t even have an account with amazon!!!! I knew it wasn’t legit!!! Why won’t people ever learn!!

  5. i received two such mail. interesting point is that the first arrived just after i closed the amazon website, and the second came minutes after i received a reguler mail from amazon.

  6. Upon reading this email, i was initially afraid that someone hacked into my Amazon account.
    So aside from knowing that I hadn’t placed, or cancelled an Amazon order recently I knew there was something wrong with the email that i received.
    After looking into it I realized there were some inaccuracies concerning the information in the email itself.
    For instance, I received the “Amazon Order Cancellation” spam on 5/5/2012.
    However the spam email i received claims that the cancellation occurred on 5/6/2012.
    In addition, the order cancellation was for a book entitled “Indefiniteness;
    By: Julian Murphy”, and there is actually no such book by this name in existence.
    I was also afraid of clicking the link on this email in fear that it might be some kind of computer virus.
    So after some searching, I wound up finding this site. I’m glad to have verified that this is a scam.

  7. I have got similar emails few times.the link when i click it took me to some Chinese website who used all Chinese fonts I do not understand anything.

    I am amazon customer. Amazon is a big company hope they take some quick action.

  8. I just got 2 of them today. Always good to report junk like this so everybody is aware.

  9. A big dead giveaway for me was the fact that the email address on which I received the fake message was not associated with my Amazon account. It’s also good to know that these apparently are not being used to spread viruses.

  10. I received two of these. Since they were clearly phishing(I had no recent orders with Amazon), I forwarded them both to Amazon at stop-spoofing at amazon.com just to be sure that they were aware of them. As if they wouldn’t be…

Leave a Reply

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.