It’s a "Prime" Time for Scams with Fake Renewal Emails on the Rise

A recent alert from the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) warns of an ongoing phishing campaign impersonating Amazon Prime renewal notices. These messages create urgency by claiming payment issues or invalid billing methods, prompting users to act quickly to avoid losing access to their accounts.

While the emails may appear legitimate, often using names such as "Prime Notification" and official branding, the sender addresses are not associated with Amazon. Users who click embedded links are redirected to fraudulent websites designed to mimic Amazon’s login page and collect credentials, payment details and other sensitive information. Similar campaigns have been widely reported, with attackers using fake renewal or cancellation notices to trick users into entering personal data on counterfeit sites

Phishing campaigns like these rely on urgency and familiarity. Cybercriminals impersonate trusted brands and use time-sensitive language to pressure individuals into clicking links or sharing information without verifying the source. Responding without verifying the message can put your personal and financial information at risk.

Recognize and Avoid Phishing Emails

Phishing emails often include warning signs such as unfamiliar or suspicious sender addresses, links that do not lead to official websites and requests for login, payment or personal information. These messages are designed to look legitimate and create urgency.

To stay secure, follow these best practices:

• Avoid clicking links or downloading attachments from unexpected emails—even if they appear to come from a known source

• Navigate directly to official websites (e.g., Amazon.com) instead of using email links

• Verify suspicious requests using trusted contact methods

• Enable multi-factor authentication (MFA) on your accounts

Report Suspicious Messages and Take Action

At Seton Hall, you play a key role in protecting the community. Reporting a suspicious message can help prevent widespread compromise across the University.

If you receive a suspicious message:

• Use Outlook’s Report Phishing feature to alert IT Security

• Delete the message after reporting

• Do not engage with the sender or click any links

If you entered credentials or financial information on a suspicious site, act immediately. Change your passwords, monitor accounts for unauthorized activity and contact your bank or credit card provider if needed. You should also report the incident to the NJCCIC and the FBI’s Internet Crime Complaint Center (IC3). Submitting a report helps track cybercrime trends and may prevent further attacks.

Categories: Science and Technology