Amazon Built a Scam Checker. Here's What That Tells Us.

Amazon Just Admitted the Scam Problem Is Enormous

On September 1, 2026, Amazon announced a new Alexa for Shopping feature that lets U.S. customers verify whether a message, email, phone call, or text actually came from Amazon. You describe the message to Alexa, and it checks it against Amazon's catalog of billions of sent communications. Suspicious messages get automatically reported.

It's a genuinely useful tool, and also a quiet admission that impersonation fraud has gotten so bad that one of the world's largest companies had to build an internal scam detector just to help customers trust them.

Think about that number again. 360,000 people a year. That's not a rounding error. That's a crisis.

Why Amazon Impersonation Works So Well

Amazon is the perfect brand for scammers to impersonate. Almost everyone has an account. Almost everyone gets real Amazon emails regularly. The messages scammers send look nearly identical to the real thing: familiar logos, order numbers, urgent language about a package or a charge.

The fake calls are even more convincing. Scammers claim your account has been compromised, that an unauthorized purchase went through, that your Prime membership is about to be suspended. They sound professional. They know your name. Sometimes they know your address.

Voice cloning has made this worse. Generating a convincing synthetic voice now requires as little as 20-30 seconds of audio. A scammer doesn't need to sound like an Amazon rep. They just need to not sound wrong.

According to the Federal Trade Commission, Amazon is consistently one of the most impersonated brands in the United States. In 2023, Americans reported losing $10 billion to fraud, with impersonation scams making up the largest category.

The Verification Problem Isn't Just Amazon's

Amazon's new tool helps with one specific question: did this message come from Amazon?

But impersonation scams aren't limited to brands. The ones that do the most damage are the ones that impersonate people. Your bank. Your doctor. Your son. Your mom.

When a caller says "It's me, I'm in trouble, I need money," there's no corporate database to check against. There's no catalog of billions of messages that proves whether the voice on the line is real. There's just a voice that sounds exactly like someone you love, and that's where people lose money.

The Grandparent Scam Keeps Evolving

The grandparent scam has existed for decades, but AI voice cloning gave it a new edge. The basic script stays the same: a grandparent receives a panicked call from someone claiming to be a grandchild who's been arrested, injured, or stranded. They need money immediately. They beg you not to tell anyone.

What's changed is the voice. It no longer sounds like a stranger trying to sound like your grandson. It sounds like your grandson, with the same speech patterns, the same laugh, the same way of saying your name.

In 2023, a Canadian family lost $21,000 after receiving a call from someone who sounded exactly like their son, claiming he'd been in a car accident and needed bail money. The voice was a clone. The son was fine, sitting at home, unaware any of this was happening.

When the voice itself can't be trusted, you need something else.

What Amazon's Tool Gets Right (and What It Can't Do)

The Alexa verification feature is smart design. It turns a question millions of people already have into a simple, fast interaction. You don't need to navigate a website or call customer service. You just ask Alexa.

It works because Amazon controls both sides of the equation. They sent the messages, so they can check whether the one you received matches their records.

Families don't have that advantage. There's no central database of your family's phone calls, no server that logs every text your daughter sent so you can check a new one against it.

The answer for families has to work differently. It has to be simple enough that anyone can use it, work even when internet is unavailable, and not depend on any company staying in business or keeping a server running.

Three Words Are Harder to Fake Than a Voice

This is the kind of problem Trust Onion was built for. The app gives families a set of three rotating codewords, calculated locally on each person's phone. The words change every 60 seconds. When a call comes in and something feels off, you ask one question: "What are the words?"

If the caller is really your family member, they open their app and read them back. Verified.

If the caller is a scammer with a cloned voice and a convincing story, they can't answer. They don't have the app. They don't know the words. And the words from a minute ago have already expired.

AI can clone a voice in seconds. It cannot clone a time-based codeword that lives only on your family's phones and changes before a scammer could even write it down.

Amazon built a tool that asks, "Did this come from us?" Trust Onion gives families a way to ask, "Is this really you?" Both questions matter, but the second one is the one that protects the people you love most.

Trust Onion is free, works offline, and takes about two minutes to set up with your family.

The Bigger Picture

Amazon building a scam verification tool isn't a tech curiosity. It's a signal. When a company with Amazon's resources decides the impersonation problem is serious enough to build a dedicated feature, that tells you something about the scale of what's happening out there.

360,000 people a year couldn't tell if a message was real, and that's with text and email, where you can look at logos and sender addresses and take your time.

On a phone call, you have seconds. The voice sounds right. The story is urgent. There's no Alexa to ask.

Having a plan before that call comes is the only thing that helps. A simple plan. Three words. One question.

"What are the words?"

That's it.