Sender check · Amazon

Is a chargeback alert from amazon.com a real email?

Q: What does a real Amazon email address look like?

Amazon says approved Amazon emails contain amazon.com and are sent from an amazon.com email address. Look for misspellings and added or substituted characters: an address that merely contains “amazon” on another domain is not Amazon.

Is a “chargeback alert” from amazon.com a real email? Amazon’s help pages don’t mention a “chargeback alert” email, so the subject line can’t settle it. What Amazon does say: approved Amazon emails come from an amazon.com address and show up in your Message Center. Here is how to check both.

Updated October 10, 2026 · 4 min read

Short answer

Amazon’s help pages don’t describe an email called “chargeback alert” (checked October 2026), so don’t judge it by its subject. Amazon’s rule is simpler: approved Amazon emails are sent from an amazon.com address, and every email Amazon sent you is in Message Center in your account. If a message isn’t there, Amazon says it wasn’t sent by Amazon. You can also forward it to verify@amazon.com. Don’t pay or sign in through a link in the email.

Official Amazon email domain and checks

Domain or check	What Amazon says	DMARC policy
`amazon.com`	Approved Amazon emails “are sent from an amazon.com email address”. Real Amazon links have a dot before `amazon.com`, like `https://something.amazon.com`.	DMARC policy: p=quarantine
Message Center	Holds all email Amazon sent you. If a message isn’t there, Amazon says it wasn’t sent by Amazon.
Smile logo	Common email providers show Amazon’s smile logo next to the message when Amazon is the actual sender (BIMI).
`verify@amazon.com`	Amazon’s address for checking a suspicious message. Not a sender: you write to it.

Source: How to identify fake emails and Identifying a scam in Amazon’s US help center. amazon.com publishes p=quarantine: receiving servers are asked to treat mail that fails DMARC as suspicious, which usually means the spam folder.

Checked October 10, 2026 against Amazon’s own help pages. DMARC policies were looked up in public DNS on October 10, 2026. A p=reject policy tells receiving servers to refuse mail that fails DMARC for the domain. A p=quarantine policy tells them to treat such mail as suspicious.

Check a sender

Paste the sender’s address, and the headers if you have them. The scam email checker compares the domain with official brand domains and reads the SPF, DKIM and DMARC results. It shows signals, not a verdict.

Is an Amazon “chargeback alert” or “account update” email real?

Amazon’s customer help doesn’t describe either email by name, and scammers pick subject lines that sound official and urgent. So ignore the subject and run the checks Amazon itself gives in How to identify fake emails:

Message Center. Message Center in your account has all email Amazon sent you. Amazon is explicit: if the email isn’t there, it wasn’t sent by Amazon. Open your account by typing amazon.com, not through the email.
The sender address. Approved Amazon emails are sent from an amazon.com email address. Look for misspellings and added or substituted characters.
The logo. Common email providers show Amazon’s smile logo next to the message when Amazon is the actual sender. Amazon refers to the BIMI Group for which providers display it (BIMI is the standard behind these logos).
The links. Real Amazon websites have a dot right before amazon.com, as in https://something.amazon.com. Amazon may send links to secure Amazon pages instead of attachments.
The order. If an email is about an order you didn’t place, Amazon says it likely wasn’t from Amazon. Check Your Orders.

Still unsure? Amazon will check it for you: send the message to verify@amazon.com, submit it through Verify Communications, or ask Alexa for Shopping in the Amazon app or website (Identifying a scam).

Red flags Amazon names for impersonation scams

Amazon’s page on identifying a scam lists the warning signs. They fit a “chargeback” story well, because it implies money is at stake:

False urgency: pressure to act before something bad happens to your account or money.
Requests for personal information: addresses, payment details, login credentials or financial information.
Purchases outside Amazon: sending money through a third-party site or by wire transfer.
Payment with gift cards: including requests for a gift card’s number, claim code or PIN.
An unexpected order: a notice about an order or delivery you weren’t expecting.

How to check the headers of an Amazon email

The From address is chosen by the sender. Your provider’s verdict is in the topmost Authentication-Results header (Gmail on a computer: More > Show original; other apps: see how to get the full headers). A message that really comes from Amazon’s domain looks roughly like this (shortened):

Authentication-Results: mx.example.net;
  dkim=pass header.d=amazon.com;
  spf=pass smtp.mailfrom=amazon.com;
  dmarc=pass (p=QUARANTINE) header.from=amazon.com

header.from must be amazon.com or a subdomain of it, and dmarc must say pass. DMARC passes only if SPF or DKIM passed for a domain aligned with the From address (RFC 9989).
dmarc=fail means forged. amazon.com publishes p=quarantine, which asks receiving servers to treat failing mail as suspicious rather than refuse it. In practice a forged Amazon email can end up in your spam folder instead of disappearing. Finding an “Amazon” email in spam is a reason to check, not to rescue it.
A pass for another domain only proves the message came from that domain.

The email header analyzer reads these results for you. For what p=quarantine and p=reject mean in detail, see what is a DMARC record.

Look-alike patterns in fake Amazon emails

A sender that passes DMARC for its own domain still isn’t Amazon if that domain is a look-alike:

Added or substituted characters: the pattern Amazon warns about. Think arnazon with “rn” for “m”, or a letter from another alphabet that looks identical.
Amazon plus a lure word: amazon-chargeback-alert.example or amazon-account-update.example.
The real name first: in amazon.com.billing-review.example the domain is billing-review.example. Compare Amazon’s rule for links: the dot comes right before amazon.com.
Display-name spoofing: "Amazon Chargeback Team" <alerts@example.net> shows only the name in many inboxes.
Unexpected attachments: Amazon says it may send links to secure Amazon pages instead of attachments, so an invoice or “chargeback form” attached as a file deserves extra caution.

The scam email checker above compares the sender with Amazon’s official domains and flags these patterns. Delivery notices are checked the same way; the UPS sender check lists the addresses UPS uses.

Report a fake Amazon email

Ask Amazon to verify itSend the suspicious message to verify@amazon.com or submit it through Verify Communications. Amazon also offers a check through Alexa for Shopping in its app.
Report a scamWith an Amazon account, use the Report a scam page, which asks what you have already shared.
Without an Amazon accountSend it to reportascam@amazon.com, ideally as an attachment. Amazon says it can’t reply personally.

Sources

Brand help pages used for this check:

Frequently asked questions

Is an “account update” email from amazon.com real?

Check it the way Amazon recommends: the sender address must be an amazon.com address, and the email must appear in Message Center in your Amazon account. Amazon lists requests for payment details or login credentials among the red flags of impersonation scams, so open your account by typing amazon.com yourself instead of using a link.

What does a real Amazon email address look like?

Amazon says approved Amazon emails contain amazon.com and are sent from an amazon.com email address. Look for misspellings and added or substituted characters: an address that merely contains “amazon” on another domain is not Amazon.

How can I check if an email is really from Amazon?

Look for it in Message Center in your Amazon account: Amazon says every email it sent you is there. You can also send the message to verify@amazon.com, use Amazon’s Verify Communications page, or ask Alexa for Shopping in the Amazon app.

How do I report a fake Amazon email?

Use Amazon’s Report a scam page if you have an account. Without an account, send it to reportascam@amazon.com, ideally as an attachment. Amazon can’t reply personally but may send an automatic confirmation.

More sender checks

Facebook and facebookmail.comIs @support.facebook.com a legit email? Meta’s own list of sending domains (facebookmail.com, fb.com, meta.com), how to check headers, where to report fakes. Instagram security emailsIs security@mail.instagram.com a legit email? What Instagram’s help center confirms, which Meta addresses it also uses, how to check the headers, how to report. Microsoft account security alertsIs accountprotection.microsoft.com a legit email? The one alert sender Microsoft names, how to check a message’s headers, common fakes and how to report them. PayPal emailsIs service@paypal a real email? What PayPal confirms about its emails, why a genuine PayPal invoice can still be a scam, how to check headers and report fakes. UPS delivery emailsIs pkginfo@ups.com a legit email address? Yes, UPS lists it. All nine UPS sender addresses, how to check the headers, how to spot and report fake delivery mail. Scam email checkerFree scam email checker: enter a sender’s address to spot look-alike brand domains, free or disposable senders, new domains and Reply-To tricks.