Cybercrooks create fake Amazon receipts

A new hacking program lets cybercriminals generate phony receipts for Amazon goods, which they're using to get refunds for items that they claim were lost in the mail.

The bad guys have created yet another online scam, this one involving fake Amazon receipts.

Targeting Amazon and its retail partners, cybercriminals are using a phony Amazon receipt generator to print bogus receipts, and then are asking for refunds from the retailer, claiming that the items they ordered were never received.

Reportedly discovered by security vendor GFI Software, this scam comes at an especially bad time, as online retailers are dealing with the onslaught of the holiday season.

"The free program available online allows scammers to create an HTML 'receipt' for phantom purchases," Christopher Boyd, senior threat researcher for GFI Software, said in a statement. "By capturing a screenshot of the fake receipt, these cybercriminals are able to e-mail unsuspecting sellers claiming they are missing items. This type of fraud, perpetrated en masse, could result in massive losses for retailers, especially during the holiday shopping season."

At first glance, the receipts are fairly convincing, according to Boyd. But upon closer inspection, some of the details are off. As a result, GFI advises online retailers to check their own records if they come across a receipt that doesn't look right. Retailers can also confirm with Amazon whether the purchase listed in the receipt was actually made.

GFI said it has passed along the information and the receipt generator program to Amazon.

Featured Video

Why do so many of us still buy cars with off-road abilities?

Cities are full of cars like the Subaru XV that can drive off-road but will never see any challenging terrain. What drives us to buy cars with these abilities when we don't really need them most of the time?

by Drew Stearne