Here's a working hypothesis: | Why is Amazon's security for replacement orders so lax? Amazon values customer satisfiction above their fraud write-off. | Why would they send a replacement to an address that has never been associated with me, and is in a wholly different state than the one the original item was sent to? Because the time between ordering an item, and defect can be sufficiently large to cover moves: peo…
> | How did the scammer know about my order in the first place to social engineer the replacement request? Via: either buying order requests Looks like you can buy order requests from people who social engineered order numbers out of amazon reps via chat. A rep from amazon provided someone who didn't authenticate themselves amazon order numbers [1]. > using third-party honeypots to capture your info, using the domain…
See someone make a blog post on their site about buying an Xbox from Amazon. Get WHOIS data from registrar. Have name and address of person who purchased Xbox. Use details to request replacement