We also use these cookies to understand how customers use our services (for example, by measuring site visits) so we can make improvements. Even big companies like Amazon can’t keep it safe, they’re far from the worst.We use cookies and similar tools that are necessary to enable you to make purchases, to enhance your shopping experiences and to provide our services, as detailed in our Cookie Notice. Mine leaked because a stupid domain I didn’t care about had its namecheap whois protection expireįor users, be extremely careful with the information you share. This makes it incredibly difficult for an attacker when they can’t even figure out your email. Right now the best defense against social engineering seems to be my fastmail account which allows me to create 1 email address alias per service. Email services should allow me to easily create lots of aliases.Is it a usual one? Is it a VPN/tor one? etc.

Show support agents the ip address of the person connecting.But in the 1 case they’re not, you can completely fuck someone over. The problem is, 9999 times out of 10000 support requests are legitimate, agents get trained to assume they’re legitimate. The only exception to this, would be if the user forgot the password, and there should be a very strict policy. NEVER DO CUSTOMER SUPPORT UNLESS THE USER CAN LOG IN TO THEIR ACCOUNT.I am in the process of closing my Amazon account, and migrating as much to Google services which seem significantly more robust at stopping these attacks.Īfter being the victim of these attacks for months, I’d like to make some recommendations for services: I have done absolutely everything in my power to secure my account, but it’s hopeless. I’m going to have to assume they got the last digits of my credit card, like they seem to be after.Īt this point, Amazon has completely betrayed my trust three times. They contacted Amazon by phone, and they don’t have a recording to give me. This time, I can’t get a transcript of the conversation.

Amazon customer service