ELS-0041Scams · Spain

The Amazon “iPhone in Your Basket” Scam: What You Need to Know

Official sources checked
Written by Sue Berry
Practical guidance

An unexpected caller says an expensive iPhone has been added to your Amazon basket—and when you check, it may really be there.

This is a particularly convincing impersonation scam. The caller may already have access to your Amazon account and could be using the item in your basket to frighten you into sharing security codes, installing software or moving money.

Here is how the scam works, the warning signs to recognise and what you should do immediately.

The Quick Answer

If someone unexpectedly calls and says an iPhone or another expensive item has been added to your Amazon basket, end the call.

Even if the item is genuinely showing in your basket, this does not prove the caller works for Amazon. It could mean a criminal has already accessed your account and added the item to make the call seem genuine.

Do not:

Share a security code

Give the caller bank or card details

Install an app or computer program

Allow remote access to your device

Transfer money to a “safe account”

Open Amazon independently using its official app or website. Secure your email and Amazon accounts from a trusted device and contact your bank immediately if any financial information may be at risk.

What Is Happening?

The scam usually begins with an unexpected telephone call from someone claiming to work for Amazon’s security or fraud department.

The caller may:

Claim that someone is attempting to buy an expensive iPhone

Tell you that your Amazon account has been hacked

Ask you to open your Amazon account while they stay on the telephone

Direct you to look inside your shopping basket

Warn that your bank account may also be at risk

Ask you to read out a one-time security code

Tell you to install a remote-access or screen-sharing app

Ask you to transfer money into a supposedly secure account

When you look in your Amazon basket, the expensive item may actually be there.

According to Which?’s investigation, some victims repeatedly removed the items, only for them to reappear. This happened because the scammers had already accessed the Amazon accounts and were adding the items again.

The item is used to make the story believable and create a sense of panic.

The caller’s real objective may be to gain access to your email, computer, telephone, online banking or money.

Who Could Be Affected?

Anyone with an Amazon account could be targeted.

However, the scam may be particularly convincing for people who:

Regularly shop online

Reuse the same password across several accounts

Have not enabled two-step verification

Are unfamiliar with remote-access software

Feel less confident dealing with unexpected technology problems

Still use UK shopping or banking accounts while living abroad

Are caught when they are busy, tired or worried

Do not have someone they can ask before taking action

The caller may know your name, telephone number or email address. This does not prove they are genuine.

These details may have come from social media, a previous data breach, public information or an account they have already accessed.

Why This Matters

This scam is unusually convincing because it combines an alarming telephone call with something visible inside your real Amazon account.

Once the caller has gained your trust, they may attempt to obtain:

Amazon login details

One-time security codes

Access to your email account

Bank or card information

Control of your telephone or computer

Bank transfers

Gift card codes

Personal information that can be used in another scam

If a criminal gains remote access to your device, they may be able to watch what you are doing, read messages, access saved information or see you sign in to online banking.

Your email account is particularly important because it can often be used to reset passwords for Amazon, banking, social media and other services.

Frequently asked questions

Would Amazon Telephone Me About an Unusual Order? Treat any unexpected security call with caution. End the call and contact Amazon independently through its official app or website. Never rely on a telephone number provided by the caller.

Why Is an iPhone Really Showing in My Basket? The fraudster may already have access to your Amazon account and may have added the item to make the call appear genuine. Secure your email and Amazon accounts immediately.

Is Money Taken When Something Is Added to an Amazon Basket? Adding an item to a basket does not normally complete a purchase. However, an unfamiliar item could indicate unauthorised access. Check your orders, payment methods, delivery addresses and connected devices.

Should I Give an Amazon Caller a One-Time Security Code? No. Only enter a code yourself when signing in through the official Amazon app or website. Never read a security code to an unexpected caller.

What Should I Do if I Installed a Remote-Access App? Disconnect the affected device from the internet. Contact your bank from another trusted device. Do not use the affected device for banking, email or password changes until it has been properly checked.

What if I Did Not Lose Any Money? You should still secure your Amazon and email accounts, check for unfamiliar activity and report the attempted scam. The criminal may retain information or account access that could be used later.

What if the Caller Knew My Full Name? Names, telephone numbers and email addresses may come from social media, public information or data breaches. Knowing personal details does not prove that a caller is genuine.

Important — Read Before You Act

Never read a security code to an unexpected caller.

Never install an app because a caller tells you to.

Never transfer money into a so-called “safe account”.

Never provide bank or card details during an unsolicited call.

Do not trust the caller simply because they know your name.

Do not use a link or telephone number supplied by the caller.

Do not remain on the call while checking Amazon or online banking.

Do not allow the caller to transfer you to a supposed bank employee.

Do not change passwords on a device the fraudster may still control.

Amazon’s fraud guidance warns customers to be cautious when someone impersonates a trusted organisation to obtain money or personal information.

If you installed remote-access software or opened online banking while the caller could see your screen, contact your bank immediately from a different, trusted device.

What To Do — Step by Step

End the Call Do not argue with the caller or follow any further instructions. Hang up, take a breath and give yourself time to think. Do not allow the caller to transfer you to an alleged Amazon security specialist, bank employee, police officer or fraud investigator.
Open Amazon Independently Use the official Amazon app or type the Amazon website address into your browser yourself. Do not follow a link sent by the caller. Check: Your shopping basket Recent orders Archived orders Saved delivery addresses Payment methods Gift card balance Connected devices Recent security messages An unfamiliar item in your basket may indicate unauthorised access, even if an order has not been completed.
Secure Your Email Account If there is any possibility that your email is also at risk, change its password from a different, trusted device. Choose a completely new password that you have not used anywhere else. You should also: Enable two-step verification Check recovery email addresses Check recovery telephone numbers Review connected devices Look for unfamiliar email-forwarding rules Sign out of sessions you do not recognise Secure your email first if it could be used to reset your Amazon password.
Secure Your Amazon Account From a trusted device: Change your Amazon password. Use a new and unique password. Enable two-step verification or a passkey. Review devices connected to the account. Sign out of unfamiliar sessions. Remove addresses you do not recognise. Remove unfamiliar payment methods. Check recent and archived orders. Contact Amazon through its official customer-service section. Report the suspicious call or account activity.
Contact Your Bank if Necessary Contact your bank immediately if you: Shared bank or card information Transferred money Installed remote-access software Opened online banking while the caller could see your screen Notice an unfamiliar transaction Shared a banking security code Use the number printed on the back of your bank card or the contact facility inside the official banking app. Explain that you may have been targeted by an impersonation and remote-access scam. Never call a bank number provided by the person who contacted you.
Secure the Affected Device If you installed remote-access or screen-sharing software: Disconnect the device from Wi-Fi and mobile data. Do not use it for banking, email or password changes. Contact your bank from another device. Record the name of the app you installed. Write down what the caller asked you to do. Remove the remote-access software. Check for other recently installed programs or apps. Run a full security scan. Change important passwords from a clean device. Ask a trusted IT professional to check the device if you are uncertain. Removing the remote-access app may not be enough if other software or settings were changed.
Report What Happened Report the suspicious activity to Amazon through its official website or app. If the incident relates to England, Wales or Northern Ireland, it can be reported through Report Fraud. People in Scotland should contact Police Scotland on 101. If you are living in Spain, free and confidential cybersecurity guidance is available through INCIBE’s 017 helpline. It operates from 8:00 am until 11:00 pm every day of the year. Contact the Spanish police if you have lost money or believe a criminal offence has occurred. Call 091 or 112 if an offence is happening at that moment or someone is in immediate danger.
What to Do Next Enable two-step verification on your Amazon and email accounts. Make sure they use different passwords that are not used anywhere else. Talk to older relatives or anyone who may feel less confident dealing with unexpected security calls. Agree on one simple family rule: No unexpected caller should ever rush you into sharing a code, installing an app or moving money. It can also help to choose a trusted person whom family members can contact before making an unusual payment or account change.

Common Mistakes to Avoid

Remaining on the telephone while checking the Amazon account
Believing the caller because the iPhone really appears in the basket
Reading out a genuine one-time security code
Installing remote-access or screen-sharing software
Allowing the caller to transfer the call to a supposed bank employee
Calling a number supplied in a follow-up message
Transferring money to protect it
Changing passwords on a device the fraudster may still control
Securing Amazon but forgetting about the connected email account
Assuming no harm was done because no money was immediately taken
Feeling too embarrassed to contact the bank or report what happened

Your Action Checklist

End the unexpected telephone call
Do not share any security codes
Do not install software
Do not transfer money
Open Amazon independently
Check your basket
Check recent and archived orders
Review saved delivery addresses
Review payment methods
Secure your email account
Change your Amazon password
Enable two-step verification or a passkey
Remove unrecognised devices and sessions
Contact your bank if financial information may be at risk
Check the affected device for remote-access software
Report the incident to Amazon
Report any fraud to the appropriate authorities
Warn family members about the scam

In Summary

The Amazon “iPhone in your basket” scam is particularly convincing because the expensive item may genuinely appear inside your account.

That does not mean the caller is helping you. It may mean someone has already accessed your Amazon account.

End the call, secure your email and Amazon accounts from a trusted device, contact your bank if necessary and report what happened.

Never share a security code, install remote-access software or transfer money because an unexpected caller tells you to.

Sue’s final thoughts & experiences

A personal note from Sue Berry

Scammers know that seeing an expensive iPhone inside your own Amazon basket will make the situation feel real and urgent. That moment of panic is what they rely on.

You do not have to solve the problem while somebody is pressuring you on the telephone. Hang up, take a breath and check everything independently.

I would encourage families to talk about these scams before they happen. A simple conversation and an agreed person to call can give someone the confidence to stop, check and protect themselves.

Being organised is not only about keeping documents safe. It is also about making sure you and the people you care about know what to do when something unexpected happens.