File a police report for the social engineering. Report that too your bank and amazon in a written, semi official letter. If that does not work lawyer up.
Ask HN: AWS refuses to stop billing me for a compromised account
21–23 of 23 posts
Re: Ask HN: AWS refuses to stop billing me for a compromised account
#22I would report the CC being stolen and get a new one. Technically, it was stolen, together with the AWS account.
Re: Ask HN: AWS refuses to stop billing me for a compromised account
#23Earlier quoted context omitted.
> They forwarded from one card to another? AWS charged a closed card and the bank forwarded it? Yup. > By the way, if you can't authenticate with Amazon as the rightful owner of that account, it sounds unreasonable for them to comply to a stranger asking them to simply remove a credit card number of some account. I disagree. If I can provide a full credit card number, they should be able to remove it from all account…
So anyone you ever bought something from with that credit card should be able to kill your AWS account with a simple phone call?
They could send an email to the owner of the account asking to reauthenticate the card (re-enter the numbers & CVV, go through 3D-Secure or provide a picture of the card or bank statement).
This would mitigate incidents like this - as far as I’m aware the attacker doesn’t actually have the card number, so giving them 24 hours to confirm it (or the card gets removed after that) would be a good solution while remaining only a minor inconvenience for legitimate usage (realistically speaking, how many online stores who might have your card number are malicious enough to call companies and try to get your accounts shut down, with no benefit to themselves?)