Most sellers think of account security as an IT problem — something that matters for banks and email, not for an Amazon storefront. That thinking is exactly what makes Seller Central accounts such an attractive target. Unlike a social media account, Seller Central controls something scammers actually want: a route to real money, through your disbursement bank details, your advertising budget, and your ability to create and edit live listings.
Account takeover attempts against Amazon sellers have become more organised, not less, as the number of private label businesses running six and seven figures through Seller Central has grown. This guide covers exactly how these attacks work, the warning signs that your account may already be compromised, and the concrete steps to lock it down before it happens to you.
Why Amazon Sellers Are a High-Value Target
A compromised personal email account is an inconvenience. A compromised Seller Central account is a direct line to cash. Once inside, an attacker can redirect your disbursements to their own bank account, drain your advertising budget, create fraudulent new listings under your established, trusted account, or sell counterfeit stock riding on your feedback history and Buy Box eligibility — all before you notice anything is wrong.
Established accounts with strong sales history and clean account health are especially valuable, because they carry trust signals — Buy Box eligibility, review counts, Brand Registry status — that a brand-new fraudulent account could never build quickly enough to monetise before Amazon catches it.
The Most Common Attack Methods
Phishing Emails
Emails that closely mimic Amazon's design and sending addresses, directing you to a fake Seller Central login page that captures your credentials the moment you type them in.
Fake Policy Violation Notices
Urgent messages claiming your account will be suspended within 24 hours unless you "verify" your details immediately — designed to make you act before you think to check the sender.
SMS / Call Interception
Attackers who already have your password try to intercept one-time SMS codes through SIM-swap scams or by posing as Amazon support over the phone to talk you into reading the code aloud.
Over-Permissioned Third-Party Apps
Repricing tools, analytics dashboards, and old integrations granted broad API access years ago and never reviewed again — any one of which becomes a backdoor if that third party is ever breached.
Reused or Leaked Passwords
A password reused across other services that leaked in an unrelated data breach, then tried automatically against thousands of Seller Central logins by bots.
Fake "Amazon Support" Contact
Scammers posing as Amazon Seller Support on social media or in search ads, offering to "fix" a fabricated account issue in exchange for remote access or your login details.
Warning Signs Your Account May Already Be Compromised
Act immediately if you notice any of the following. Do not assume it is a glitch — verify directly in Seller Central and change your password before investigating further.
What a Takeover Actually Costs You
The financial exposure goes well beyond a single fraudulent transfer. Once inside, an attacker can redirect weeks of disbursements before you notice, since payouts typically run on a rolling cycle rather than a single lump sum. They can burn through your advertising budget in hours on campaigns designed to funnel clicks to their own fraudulent listings. And if they use your account to sell counterfeit or prohibited goods, it is your account — not theirs — that absorbs the policy violation, the suspension, and the damage to your account health rating while you fight to prove it wasn't you.
Securing Your Seller Central Account: Step-by-Step
Enable Two-Step Verification with an authenticator app
Go to Settings → Login Settings → Two-Step Verification. Choose an authenticator app (Google Authenticator, Authy) over SMS wherever Amazon allows it — SMS codes can be intercepted through SIM-swap attacks, while an authenticator app cannot.
Audit your User Permissions list quarterly
Go to Settings → User Permissions and remove access for any former employee, freelancer, or agency you no longer work with. Every active user is another potential point of compromise.
Review third-party app and API authorisations
Under Settings → Manage Your Apps, revoke access for any repricer, analytics tool, or integration you no longer actively use. Old, forgotten authorisations are a common and overlooked entry point.
Use a unique password stored in a password manager
Never reuse a password from any other account. A password manager generates and stores a long, unique password per login, closing off the credential-stuffing attacks that rely on reused passwords leaked elsewhere.
Verify your deposit and bank details monthly
Check Settings → Account Info → Deposit Methods on a fixed monthly schedule, not just when something looks wrong. Catching an unauthorised change within days rather than weeks dramatically limits the financial damage.
Never click a login link from an email
Always navigate to sellercentral.amazon.co.uk directly by typing it in or using a saved bookmark. Genuine policy or performance notices are visible inside Seller Central's own Performance Notifications — you never need to click through an email link to see them.
If You Think You've Already Been Compromised
Change your password immediately
Do this from a device you trust, not the one you suspect may be compromised, in case malware is involved.
Check and revert your deposit/bank details
Go straight to Settings → Account Info → Deposit Methods and confirm the account on file is yours. Revert immediately if it has been changed.
Remove unfamiliar users and revoke app access
Strip out any user or third-party authorisation you don't recognise from User Permissions and Manage Your Apps.
Contact Amazon Seller Support directly
Open a case through Seller Central itself (never through a link or number from an email) explaining you suspect unauthorised access. Ask them to review recent account activity and listing changes.
Audit recent listing and campaign changes
Check your catalogue and advertising console for anything created or edited in the window you suspect the account was compromised, and remove or pause anything unfamiliar.
Recovering From a Takeover: What Amazon Will and Won't Do
Amazon does investigate confirmed account takeover cases and can reverse some fraudulent disbursements if reported quickly, but there is no guarantee of a full refund, and the process can take weeks. Amazon's Seller Support will also help restore account health if a suspension was caused directly by the attacker's actions and you can demonstrate the account was compromised — but the burden of proof sits with you, which is exactly why fast action and a clear timeline of what happened matter so much.
The honest takeaway: prevention is dramatically cheaper and faster than recovery. The six steps above take under an hour to implement once and cost nothing — recovering from a real takeover can take weeks and isn't guaranteed to make you whole.
Worried your account setup has gaps?
StoreStride reviews account security as part of every audit — permissions, app access, and the settings most sellers never check. Get a free review of your account today.
Get Free Amazon PPC Audit →Common Questions About Account Takeover
Is two-step verification actually mandatory on Amazon Seller Central?
Amazon has progressively required it for most sellers, and even where it isn't strictly enforced on your account yet, treat it as mandatory. It is the single highest-impact change you can make, and it takes minutes to set up.
Can my PPC or account management agency be a security risk?
Only if access isn't managed properly. A reputable agency should be added as a named user through Seller Central's own User Permissions with scoped access to the sections they need, never given your master login and password. If anyone ever asks for your actual login credentials rather than a user invitation, that's a red flag regardless of who they claim to be.
How quickly do attackers usually act after gaining access?
Often within hours. Automated takeover attempts are designed to redirect bank details and extract value as fast as possible before the real account owner notices, which is exactly why monthly manual checks aren't enough on their own — alerts and two-step verification are what catch it in real time.
Does Amazon notify me if someone logs in from a new device?
Yes, in most cases Amazon sends a sign-in notification for new devices or locations. Never ignore one of these emails, and never treat it as routine — verify it was genuinely you before dismissing it.