Last Thursday, March 5th, my household received a package from Amazon. It was full of things that we had never ordered, used, talked about, or could use in the future. My wife and I both have accounts and we share a Prime membership, if that is noteworthy.
I asked her what she ordered because I hadnāt placed an order since February 22nd which was delivered without issue. She said she didnāt order anything either.
I logged into my credit card app and saw a purchase using her card information that correlates to the package that was delivered.
I called the credit card company and told them it was a fraud charge. They reissued her a new card number.
From there, we changed all of her Amazon credentials. Two factor authentication was always, and still was, set up on her account. All login information remained the same without any phone number or email changes for the two factor authentication. We checked purchase history and there was nothing suspicious on her or my accounts. Nor did it show any purchases that matched the items we received.
Did a chat with Amazon who could see the order was placed from āanother accountā but that was all the information they would give me.
The next day we received an email from Amazon saying no fraud was detected.
This is the oddest thing. If she were compromised, why were items shipped to us? Why was there no changes to her account to hijack it? Do you think this was an internal Amazon error? Please advise!