Apparently someone managed to call Amazon's support, tricked and convinced them into changing my account's email, ordered something, and eventually proceeded to delete my entire account.

Now Amazon's support refuses to help me for data protection reasons 😂

Looks like it's enough to know someone's address to hijack their #amazon account.

Update: support refuses to help me via email, because they need me to call and confirm my postal address to prove my identity.

They don't even seem to realize this is exactly where the entire dilemma started 😩

Also I simply don't know the postal address the hijacker changed my account to.

Last but not least, they can't help because the account is now deleted. They sure do seem to still store a whole lot of data associated with it still, though.

@fribbledom If you can confirm your real address they should still be able to check that it was the old address on the account before it was attacked.


This might help me right now, but I feel like that's just making the problem even worse:

It's bad enough they accept my current address as a valid form of authentication, but now even all my previous addresses suffice, too?!


@fribbledom I'm betting the attacker had something more than your address - perhaps date of birth (hmm cake...)? Maybe an order number/item? Still, you can't expect Amazon to fix their screwup without some proof of something!

@penguin42 I'm happy to prove my identity to them, but they're not even accepting a proper form of identification.

Instead they ask me questions only the hijacker would be able to answer at this point.

Heck, even an email to the original address would suffice to prove it... you know, like virtually every other service handles such situations.

Sign in to participate in the conversation

General purpose mastodon instance