Short answer
If Amazon sends a security alert about activity you don’t recognise, choose Deny (or tell Amazon it wasn’t you) — Amazon says this helps reset your password immediately. Report orders or charges you didn’t make as unauthorised activity, and change the password on the email linked to the account. If Amazon took security actions — cancelled orders, disabled the password or signed you out — follow the steps in its notice; it says it reviews accounts and restores access within 24 hours if the action was a mistake. Then turn on Two-Step Verification with both a phone number and an email address.
Act on the alert
- Activity you don’t recognise: select Deny, or say it wasn’t you.
- Can’t reach the email or phone on the account? Use the self-service recovery shown, or contact Amazon Customer Service.
- Only trust alerts you can also see after signing in yourself at amazon.com.
Orders and charges you didn’t make
- Report the transaction, charge or account activity as unauthorised.
- Change your Amazon password and your email password.
- Check saved addresses, payment methods and devices for changes.
- Tell your bank if a card was charged.
If Amazon locked or limited the account
Amazon may cancel pending orders, disable the password or sign you out to protect the account. Follow the verification steps in the notice; Amazon says that if the actions were applied in error it reviews the account and restores access within 24 hours. If two-step verification fails, recovery needs identity verification, which Amazon says can take 1–2 days.
Lock it down
- Turn on Two-Step Verification and add both a mobile number and an email address.
- Use a unique password — and a passkey where offered: passkeys explained.
- Sign out of devices you don’t use: who else is logged in?
Fake “Amazon” messages
Most Amazon takeovers start with a fake email or text. Amazon’s advice: check that the message also appears in your Message Center, and that links go to an amazon.com domain. Report fakes through Amazon’s Report a Scam page — and see how to report phishing. Our hacked account recovery service works only through official channels.
Frequently asked questions
What should I do if I get an Amazon security alert I don’t recognise?
Select Deny or tell Amazon it wasn’t you. Amazon says this helps reset your password immediately.
Someone placed orders on my Amazon account — what now?
Report the activity as unauthorised, change your Amazon and email passwords, and check addresses and payment methods.
Why did Amazon cancel my orders and sign me out?
Amazon can take security actions when it suspects a takeover. Follow the notice; it says it restores access within 24 hours if the action was a mistake.
How long does Amazon account recovery take after 2SV fails?
Amazon says the identity verification can take 1–2 days.
Sources: Amazon — how to keep your account safe and secure, Amazon — about security alerts, Amazon — report an issue with account security actions, Amazon — recover your account after Two-Step Verification fails, Amazon — report suspicious activity, Amazon — how to identify fake emails