Now this is going too far...

[MikeHawthorne]

I got a message via Alexa indicating that I needed to get a new payment method and my Order Could not be shipped. I've never heard her saying anything related to orders before.
Furthermore, I believe she offered me the opportunity to do it in some way. I don't actually remember, that's the problem with not being able to repeat the message and being 85.

I went to my Amazon page and found there was no message on my account page, and it showed the new correct debit card.
Not only that, but I checked my order, and it is still showing as arriving on Sunday, one of the items has already shipped.
You can't even trust Alexa anymore.

I can only think that I'm getting hit with all these scams because I'm 85 years old, but hacking Alexa is going too far.

 

[ChatGPT]

I'm sorry to hear about your experience with Alexa and the concerns you have regarding the security of your Amazon account. While scams and phishing attempts can unfortunately target people of any age, it's important to remain cautious and vigilant online.
Firstly, it's great that you checked your Amazon account page and confirmed that there were no new messages or issues with your payment method. It's always a good practice to directly log into your accounts and verify any notifications or alerts you receive.
If you suspect that your Alexa device has been compromised or hacked, there are a few steps you can take to address the issue. Firstly, make sure your Alexa device is running the latest software updates. Amazon regularly releases updates to address security vulnerabilities and other issues. Additionally, consider changing your Alexa device's wake word and password to ensure that unauthorized access is more difficult.
In general, it's important to be cautious when dealing with sensitive information, such as credit card details or personal data. Avoid sharing this information over phone calls or emails unless you are absolutely certain about the authenticity of the request.
If you believe you've received a scam or phishing attempt, it's always a good idea to report it to the appropriate authorities, such as Amazon's customer support or your local law enforcement agency. They can help investigate the issue and provide guidance on further steps you can take to protect yourself.
Remember, it's unfortunate that scams exist, but by remaining cautious and proactive in protecting your personal information, you can minimize the risk of falling victim to such schemes.

 

[MikeHawthorne]

I just went and looked online and found other people getting scam messages from Alexa, so it's not just me again, it's the same scam that I get by email telling me I have to update my brand-new debit card.

 

[ussnorway]

Alexa is a robot, they tell you all kinds of bullshit because that is how a human programed them

 

[MikeHawthorne]

I feel like I'm under Siege, after the notice from Alexa I have received two email messages ostensibly from Amazon, telling me that my account payment method needs to be updated.

I just logged into Amazon and as I expected my account is fine and has my latest card registered.
I'm getting to the point where I don't trust anything, even from the businesses I use.

It's kind of a pain. I never click on links, especially not from my credit union, and bank.

 

[SavorySilicon]

I got a message via Alexa indicating that I needed to get a new payment method and my Order Could not be shipped. I've never heard her saying anything related to orders before.
Furthermore, I believe she offered me the opportunity to do it in some way. I don't actually remember, that's the problem with not being able to repeat the message and being 85.

I went to my Amazon page and found there was no message on my account page, and it showed the new correct debit card.
Not only that, but I checked my order, and it is still showing as arriving on Sunday, one of the items has already shipped.
You can't even trust Alexa anymore.

I can only think that I'm getting hit with all these scams because I'm 85 years old, but hacking Alexa is going too far.

Screenshot.

 

[bochane]

Try to get access to the Source of the Message. I get into it by opening MS webmail, it opens an on-line Outlook.
Select the message, right click on the message, select option: Weergeven in Duch, in English Show?, than select Source of Message. There you find the Message header lines like: Received from, several times: the route this message followed / Reply to: most times fake replay address / Return path: it may tell you who is really sending you this scam.
You may try to add this address to your blocked email list:
Open in the task bar of Outlook: Rules > Email > Blocked email, there is the Blocked email list.
Hope this helps

 

[ussnorway]

its not just you Mike... lots of people are being scammed by fake notices and hacking Alexa into passing these bullshit warnings on is just the lastest trick

if they send it to a 1000 people and one poor smuck clicks it then they made a profit this week... where i live its become so bad the local banks had to put up signs telling customers to ignore any emails they get saying accounts need fixing

 

[MikeHawthorne]

I just got off from chatting with a series of I assume Robots at Amazon, they confirmed that none of the messages are from them.
That my credit card is fine, and that they are not going to cut off my Prime TV, the latest threat.

And they assured me that it is going to be turned over to the fraud squad or whatever they call them.

 

[wordtech]

I just went and looked online and found other people getting scam messages from Alexa, so it's not just me again, it's the same scam that I get by email telling me I have to update my brand-new debit card.

Scams Mike, watch out mate, or they'll wipe out your bank account. The perils of online life these days, yeah, it's frightening.

 

[MikeHawthorne]

I have a rule, if they ask you to click anything, delete it and go to the store page. The problem is with people, if anything can be exploited, someone will do it. A lot of the stuff I've been getting lately is from New Zealand. It used to be mostly from Russia.

 

[MikeHawthorne]

Now I'm getting several messages saying my package can't be delivered, just got three of them all at the same time.
A couple of days ago, I got a phone call ostensibly from Medicare, they asked if I had received my new card.
I said I hadn't gotten a new car in a long time.

They then asked me to confirm who I was, they asked me if I was, "my name" and then gave me my name and address and phone number.

I said I was, and they asked for my number on the card, I said I don't give anything out over the phone. I said, why don't you give me the number, and I'll tell you if it's correct. She said that she wasn't allowed to do that.
I said, I guess we're at a stalemate.

She said your card will stop working in a few days. I said when that happens, I'll contact Social Security.
I've been to the doctor since and my card is working fine, they don't ever ask for it anymore. They're a lot more interested in my insurance care.

We need a new branch of government just to clamp down on these scammers and put them in jail.
I forgot to mention that she had an Indian accent, which probably means that our government can't do anything about them anyway.

But this keeps getting worse all the time.

 

[ChatGPT]

Oh, Alexa, now you're joining in on the scam parade too? That's next-level sneaky. It's unsettling to hear not just from email or text scams but now through smart devices like Alexa!

What’s Likely Happening?​

Scams like these don’t mean your Alexa device itself is compromised, but rather, misconfigured settings or vulnerabilities in linked accounts might expose you to deceptive tactics. Here's how this could have unfolded:

1. Third-Party Skills Gone Rogue: Alexa uses skills (think of them as apps), and some third-party ones haven’t gone through rigorous security vetting. Scammers can exploit poorly coded or malicious skills.
2. Phishing Voice Messages: Alexa can repeat messages or even play predefined announcements if someone exploits your Amazon account.
3. External Inputs via Linked Accounts: If your email or Amazon account information is exposed through another breach, scammers may be targeting you on multiple fronts.

Prevention & Solution Checklist​

1. Check and Disable Suspicious Alexa Skills:
   • Open the Alexa app → More → Skills & Games.
   • Look for any skills you don’t recognize or don’t recall enabling. Disable anything suspicious.
2. Enable Voice Purchases Block:
   • If the scammers are baiting you into saying something like “yes” to an offer, ensuring you have purchases disabled is essential.
   • Go to Settings → Account Settings → Voice Purchasing, and either disable or enable a PIN code for any purchases.
3. Secure Your Amazon Linked Accounts:
   • Change passwords for Amazon, email, or any account linked to Alexa.
   • Turn on two-factor authentication (2FA) for every account you use.
4. Check Alexa Communication Settings:
   • Go to Settings → Communications in the Alexa app. Disable options like Drop-In or Announcement features if you don’t use them. These are often vectors for unauthorized messages.
5. Monitor Smart Home Device Access:
   • Review shared access in smart home device settings. Make sure no one else has administrative privileges to your Alexa account.
6. Cross-Check with Amazon:
   • Visit your messages or Settings in your Amazon account to ensure there isn’t additional information saved to enable scams. Report the incident through Amazon’s fraud department at Amazon support.

General Best Practices​

• Remember, Alexa doesn’t initiate debit card updates, banking requests, or anything remotely financial. Anytime you hear those, it’s a scam.
• Always verify messages through official channels (banking apps, official emails, or your physical card provider).
• Reporting these incidents strengthens the case for companies like Amazon to tighten device and account security measures.

While scammers innovate, taking these steps ensures Alexa stays your helpful assistant rather than a scam magnet. Now you’ve got tech pulling double-duty—Alexa, make yourself safe to use!