Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsSecure your Amazon account before you shop: enable Amazon Two-Step Verification, use a password that exists nowhere else, keep your recovery email and phone current, and verify every payment request inside the Amazon or bank app rather than through an unexpected message. Pay by credit card when practical, retain transaction records, and contact the issuer immediately if card details or credentials may have been exposed.
Secure the account before your next purchase
Account security and payment security are linked. Someone who obtains your Amazon password may be able to view orders, change contact details, use stored payment methods, or interfere with recovery. Someone who obtains card details can attempt transactions even without entering your Amazon account. Set up the account controls first, then use a deliberate process for messages and checkout.
As an Amazon Associate I earn from qualifying purchases.
Turn on Amazon Two-Step Verification
Amazon describes Two-Step Verification as “a feature that adds an extra layer of security to your account log-in.” It requires your password plus a unique security code, so a stolen password alone should not be enough to sign in.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →- Sign in by opening Amazon through the official app, a saved bookmark, or an address you entered yourself.
- Open Your Account.
- Select Login & security.
- Find Two-Step Verification and follow the on-screen setup instructions.
- Choose an available code method, such as text message or an authenticator app, and complete the test sign-in.
- Save any backup or recovery information Amazon presents. Keep it somewhere private and accessible if your usual phone is unavailable.
Amazon’s help describes text messages and authenticator apps, but account menus and supported methods can change. Check the live Login & security page rather than relying on an old screenshot or a message that tells you to use a particular link.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
A physical security key can be a strong form of two-factor authentication for accounts that support it. Federal Trade Commission guidance describes security keys as a more secure type of two-factor authentication, but the cited Amazon instructions do not establish that every security key works for Amazon sign-in. Treat one as optional until Amazon’s current settings confirm compatibility.
Compare the available sign-in methods
Use the strongest method your Amazon account actually supports, while planning for recovery. Text-message codes depend on access to your phone number and cellular service. An authenticator app avoids delivery delays and may work when text service is unavailable, but you must protect the device and transfer or restore the app if you replace it. A security key can resist some phishing attacks more effectively, yet compatibility and a spare-key or recovery plan are essential. Whichever method you choose, keep backup information private and test the recovery route before an emergency.
Use a password unique to Amazon
Create a long password that you have never used on another service. Reusing a password turns a breach at an unrelated site into a possible Amazon takeover. Do not give the password to a third-party site, browser extension, shopping tool, or person. Amazon says that a third party with your credentials can act as the account holder.
Recommended Free Tools
A password manager may help you generate and store unique passwords, but it is not a substitute for evaluating the service itself or protecting the device and recovery account that unlock it. If you use a third-party sign-in option such as Login with Amazon, review the service and the permissions it requests before approving access. A familiar sign-in button does not make every connected service trustworthy.
Protect the recovery channel
Your email address and phone number are part of the security boundary. Keep both current, use a strong password and two-step protection on the email account, and make sure the phone can receive the method you selected. An attacker who controls the recovery email or phone may be able to reset access even when the Amazon password is strong.
Amazon lets you edit contact details and your password in Login & security. Review stored cards, bank details, and other payment methods under Your payments. Remove payment methods you no longer need, especially old cards or accounts that are no longer monitored. Recheck these settings after changing your email address, phone, password, or primary card.
Recognize phishing before it reaches your account
Phishing messages impersonate a familiar company and manufacture urgency: a failed payment, an unusual login, a locked account, a refund, or a delivery problem. The aim is to make you click a link, call a number, disclose a password, or send payment. Amazon and the FTC advise treating an unexpected message as untrusted until you verify it independently.
Use a safe verification routine
- Do not click links, open attachments, or call a phone number in an unexpected email, text, social message, or pop-up.
- Open the Amazon app or type the known address yourself. A saved bookmark is safer than a link in the alert.
- Check Your Orders, account notifications, payment methods, and Login & security for the alleged problem.
- If the message claims to concern a bank card, open the bank’s official app or type its known web address separately.
- Report suspicious or fraudulent correspondence through the reporting method Amazon provides, then delete the message.
The FTC’s wording is direct: “So, don’t click on any links in unexpected emails or texts.” A genuine account issue should be visible when you navigate to the service yourself; you do not need the message’s shortcut to investigate it.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Check the actual domain, not just the design
A polished logo, familiar colors, or a padlock icon proves little. HTTPS indicates that the connection is encrypted in transit; it does not prove that the site belongs to Amazon or a legitimate seller. Read the domain carefully and reach the service through a known route. Never enter an Amazon password or card number into a page reached from an unexpected alert.
Reject unusual payment demands
Amazon Pay warns about requests to move payment away from the merchant’s intended checkout, requests for gift-card claim codes, and demands for wire transfers or other unusual payments supposedly needed to guarantee a sale or release a refund. The FTC also warns about sellers who insist on gift cards, wire transfers, payment apps, or cryptocurrency.
For an ordinary purchase, keep checkout on the platform or on the seller’s established payment page. Do not send a card number, security code, gift-card code, bank transfer, or cryptocurrency in response to a message. A request to “protect” an account by paying someone is a warning sign, not a security measure. Legitimate refunds normally return through the original payment process; verify any exception independently.
Handle payment verification safely at checkout
Expect an issuer verification step
Amazon Pay says your card issuer may redirect you to the issuer’s website or app for an extra check. The step can involve a one-time code, an approval in the bank app, or another identity check. This is different from a random email asking for your card details: it occurs as part of the checkout flow and should identify the bank or card issuer.
- Start checkout from Amazon or the merchant you intentionally selected.
- When redirected, confirm that the page belongs to your bank or card issuer and that the transaction details match your purchase.
- Complete the code or app approval without sharing the code with a caller, texter, or chat participant.
- Return to checkout and confirm whether the order completed.
- If verification repeatedly fails, contact the issuer using the number on the card or the official app. Amazon Pay says you may need a different payment method.
Requirements vary by bank, card, payment type, and location. Do not disable a bank’s verification control merely to force a transaction through. If an approval notification shows a different amount or merchant, reject it and contact the issuer.
Choose a payment method with recourse
The FTC says, “Paying by credit card best protects you and your money in case of a scam, or if something else goes wrong.” A credit card can provide dispute options when a purchase is charged incorrectly, never arrives, or differs materially from what was ordered. Card terms, time limits, and procedures vary, so follow the issuer’s instructions rather than assuming every card offers identical protection.
No payment method eliminates fraud. Debit cards, bank transfers, payment apps, gift cards, and cryptocurrency can have different recovery rules, and some transfers are difficult to reverse. Before paying, consider whether you can identify the seller, keep a record of the transaction, and contact the provider if the purchase fails.
Free tools Windows power users keep installed
One-click scans. No signup required.
In practical terms, compare four things before choosing: whether the provider offers a dispute process, how quickly it handles fraud reports, whether checkout may require issuer verification, and what its terms say about unauthorized use. A payment method that is convenient for a small purchase may be a poor choice for a high-value order if it offers little recourse.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Keep evidence while the transaction is fresh
Save the order confirmation, seller name and contact details, item description, advertised price, delivery promise, return terms, and payment record. Keep copies of relevant messages without clicking their links. These records help you explain a problem to the seller, Amazon, your card issuer, or a regulator and help distinguish a legitimate charge from an unauthorized one.
What to do if you clicked, entered information, or see a suspicious charge
Speed matters, but use a known route for every recovery action. Do not continue a conversation with the person or site that requested the information.
If you entered your Amazon password
- Open Amazon through the official app or a known address and change the password immediately.
- Make the new password unique; do not reuse the exposed one.
- Review Login & security for changed email addresses, phone numbers, password-reset activity, and Two-Step Verification settings.
- Change the same password anywhere else it was reused, starting with the email account used for Amazon recovery.
- Review orders, messages, and Your payments for changes or activity you do not recognize.
Amazon specifically advises changing the password immediately when it was entered on a site suspected of being malicious. If you cannot sign in, use Amazon’s normal account-recovery process from its known site, not a link supplied by the suspicious message.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If you submitted card details to a suspicious site
- Contact the card company immediately using the number printed on the card or the issuer’s official app.
- Tell the issuer where and when the details were submitted and ask whether the card should be frozen, replaced, or monitored.
- Remove that card from the Amazon account to prevent improper reuse, following current Amazon and issuer guidance.
- Review Amazon and Amazon Pay activity and report anything you do not recognize.
- Watch statements and alerts for further attempts; keep the incident records and the issuer’s case number.
Do not wait for a posted charge before notifying the issuer if you know the card data was exposed. The issuer can explain the applicable replacement and dispute process.
If an Amazon or Amazon Pay charge is unauthorized
Check whether the transaction belongs to an order, subscription, household member, or another authorized user before disputing it. If it remains unexplained, report it to Amazon Pay or the bank/card issuer as appropriate. Amazon Pay’s Shopper FAQ says unauthorized Amazon Pay charges can be disputed no later than 13 months after the transaction, subject to its terms and stated exceptions. That is a service-specific notice condition, not a universal deadline for credit-card disputes or for every Amazon purchase. Use the current dispute instructions and contact the relevant provider promptly.
If personal or financial information may have been stolen
The FTC directs people to IdentityTheft.gov for recovery steps and advises reporting phishing to the FTC. Follow the actions for the information exposed, keep copies of reports, and continue monitoring the affected accounts. If identity documents or broader financial information were involved, ask the affected institutions what additional protective measures apply.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.A practical protection schedule
Before shopping
- Confirm Two-Step Verification is enabled and that its code method and backup route still work.
- Check that the Amazon recovery email and phone are current and protected.
- Review stored payment methods and remove obsolete cards.
- Decide which card you will use and ensure transaction alerts are enabled by the issuer if available.
- For an unfamiliar seller, independently check its identity, contact details, return terms, and delivery promise before entering payment information.
During checkout
- Navigate to Amazon or the seller directly rather than through an unexpected message.
- Verify the seller, item, total, delivery terms, and return policy before paying.
- Complete any issuer verification only on the issuer’s identified page or app.
- Refuse requests for gift-card codes, wire transfers, cryptocurrency, or payment outside the intended checkout.
- Pause if the checkout total, merchant name, currency, or verification prompt does not match what you expected.
After payment
- Save the confirmation and payment record.
- Check the order in Your Orders and watch the card statement for the expected amount.
- Report an unrecognized transaction promptly to Amazon Pay or the issuer.
- Delete suspicious messages and report them through the appropriate channel.
- After a shared or public-device session, sign out and avoid saving passwords or card details in that device’s browser.
Periodic account review
Every few months, open Amazon directly and inspect Login & security, recovery contacts, Two-Step Verification, active payment methods, and recent orders. Remove obsolete cards and investigate unfamiliar addresses, subscriptions, or devices. This routine is useful because a fraudulent change may not produce an obvious warning message. Perform the same review after travel, a lost phone, an email compromise, or a card replacement.
What the available data does—and does not—show
The FTC reported in 2023 that online shopping scams were the second-most reported type of scam in its 2022 data. That is a historical ranking of reports, not a current prevalence estimate and not a prediction of the risk of any individual Amazon order. The practical response is to use layered controls: protect the sign-in, verify the route to checkout, choose a payment method with meaningful dispute options, and preserve records for fast recovery.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Frequently Asked Questions
How do I secure my Amazon account?
Open Amazon through the app or a known address, then go to Your Account, Login & security, and enable Two-Step Verification. Use a unique password, protect the email and phone used for recovery, and review stored payment methods under Your payments.
What should I do about a suspicious Amazon email or text?
Do not click its links, open attachments, call its number, or provide credentials. Open Amazon independently, check orders and account settings there, report suspicious correspondence through Amazon’s reporting method, and delete the message.
Is a padlock or HTTPS enough to trust a shopping site?
No. HTTPS encrypts the connection but does not prove that the site is Amazon or a legitimate seller. Check the actual domain and navigate through a known bookmark or app.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Why did Amazon Pay send me to my bank?
Your card issuer may require an additional checkout check, such as a one-time code or bank-app approval. Confirm that the issuer page and transaction details are correct. If verification repeatedly fails, contact the issuer through its official channel.
What payment method is safest for online shopping?
The FTC recommends paying by credit card when possible because it may provide dispute protections. Compare each provider’s dispute rights, fraud handling, verification requirements, and terms; no method removes all risk.
What if I entered my Amazon password on a fake site?
Change it immediately through Amazon’s known app or address, make the new password unique, change it anywhere else it was reused, secure the recovery email, and inspect Login & security, orders, messages, and Your payments.
What if I gave a suspicious site my card number?
Contact the card issuer immediately using the number on the card or its official app. Ask whether to freeze or replace the card, remove it from Amazon as appropriate, review activity, and monitor statements and alerts.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →How long do I have to report an unauthorized Amazon Pay charge?
Amazon Pay’s Shopper FAQ states that unauthorized Amazon Pay charges can be disputed no later than 13 months after the transaction, subject to its terms and exceptions. This is not a universal deadline for credit-card disputes or every Amazon transaction, so contact the relevant provider promptly.
The Bottom Line
Use layered protection: enable Two-Step Verification, keep a unique password and secure recovery channel, verify messages and bank prompts through known apps, pay by credit card when practical, save records, and report exposed credentials or unauthorized charges immediately.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
