Almost 7000 Amazon Prime Day scam domains have been registered before the big sale

Check Point Research warns Prime Day (June 23–26, 2026) is fueling a surge in malicious Amazon‑themed domains

6,843 domains registered Dec–May; nearly 10% flagged malicious/suspicious, with June showing 1 in 13 domains risky

Shoppers urged to avoid Google searches for Amazon, verify URLs, and treat “too good to be true” deals with caution

Thousands of new domains were registered in the weeks and months leading up to Amazon Prime Day, most of which are malicious and created to steal consumer data and possibly money. This is according to a new report from Check Point Research (CPR), in which the security outfit warns about Prime Day being the perfect storm for every cybercriminal.

Amazon’s Prime Day is set to take place between June 23 and 26, 2026. During these four days, thousands of retailers in 25 countries will offer great deals on their goods and services, creating one of the biggest retail events on the planet. Consequently, they’ll also be creating one of the biggest cyberattack events on the planet, as well:

“Major retail moments bring together the three ingredients’ attackers exploit most: a globally trusted brand, time-limited urgency, and massive purchase intent at scale,” CPR warns, adding that phishing emails, fake websites, fraudulent offers, and account takeover attempts all surge during this period.

How to defend against Prime Day scams

For events such as this one, crooks prepare months in advance. CPR found that between December 2025 and May 2026, there were 6,843 new Amazon-themed domains registered worldwide, most of which were set up in April (1,446). May 2026 added another 1,267 domains.

Obviously, not all of them will be malicious, but CPR said that almost one in ten (9.2%) were already classified as either malicious or suspicious, and in the first week of June, one in every thirteen was labeled the same way.

“This pattern reflects a broader build-up of malicious infrastructure ahead of the event, with multiple Amazon-themed domains designed to exploit brand trust, urgency, and high purchase intent at scale,” the researchers warned.

To stay safe this Amazon Prime Day, always double-check the website you’re visiting, always go to Amazon's legitimate domain (https://www.amazon.com/) rather than relying on Google search results, and remember - if something is too good to be true, it most likely is.

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.