An email claims to be from Amazon.co.jp. It thanks you for being a customer, mentions account safety, and asks you to “verify your account.” Beneath the polite message sit copyright notices and an official-sounding company name.
Lovely stationery. One problem: the link does not identify Amazon as its host.
Short answer: Treat this as a highly suspicious phishing attempt. Do not sign in through the email. Open Amazon independently through its official app or a bookmark you already trust. The revealing detail is the @ symbol in the URL.
1. An urgent account check with no actual account problem
The message speaks of an “important notice,” yet it never identifies a concrete incident. Was there a suspicious login? A failed payment? A changed address? We are not told.
Instead, it promises that checking your account will not change your information. That is reassurance, not evidence. If a stranger arrived at your door and said, “For building security, please hand over your keys; I will only check them,” the word “only” would not turn that stranger into your landlord.
A polished footer and correct trademark names do not establish who sent an email. Anyone can type a company's name.
2. The @ sign gives away the URL's real host
Here is a defanged illustration, not a usable link:
https://looks-like-amazon[.]invalid@share[.]google/[removed]
A URL may have the structure userinfo@host. The apparent Amazon text before @ is in the user-information portion. It is not the destination website's domain. The host after @ is share.google. MDN documents this URL syntax.[1]
So the trick is visual: put the brand costume at the front, hoping the reader stops reading before the actual hostname. The email says “Amazon”; the address structure says something else. An identity crisis in one line.
3. Google is real. That does not make this Amazon
There is an important nuance. share.google is a genuine Google short-link domain, used by the Google app. Google explains this in its help documentation.[2]
The issue is not that the domain itself must be counterfeit. A genuine shortening or sharing service can conceal the eventual destination from someone reading an email. We did not open this particular shortened link, so its final destination, any possible fake login screen, and any data theft remain unverified.
What we can establish is narrower and strong enough: an unsolicited Amazon verification request used a non-Amazon host, an obscuring short link, and deceptive brand-like text before an @ sign.
4. The footer is not a security certificate
The message includes a reply-disabled notice, legal-sounding copyright language, and an unsubscribe-looking link. None confirms that Amazon authored it.
Nor have we inspected the original message headers or authenticated sending infrastructure. This is an assessment of the provided text and URL syntax, not a forensic verdict on a server or landing page.
Even a familiar company name in a link does not prove that the entire email is legitimate. The safe approach is to leave the message and reach Amazon through your own trusted route.
5. What if you received or clicked it?
Not clicked: Ignore the embedded verification and unsubscribe links; open Amazon separately and check for real account notices. Report the message as phishing.
Clicked but entered nothing: Close the page, check whether anything was downloaded or installed, and do not assume that clicking alone proves an account takeover.
Entered a password: Open Amazon independently, change the password, change any reused passwords, enable multifactor authentication, and inspect recent orders, payments, and account changes.
Entered card information: Contact your card issuer through its official number immediately.
The FTC recommends avoiding links in unexpected account messages and contacting businesses using a source you already know is genuine.[3]
The punch line
This email dressed as Amazon, practiced a corporate greeting, and brought a respectable legal footer. Then its URL arrived wearing someone else's name badge.
Look at the actual host, not the brand-shaped decoration. And when an account alert matters, go to the real service yourself.
References (1)
[1] MDN, URI authority: https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Authority
[2] Google Search Help, share.google short links: https://support.google.com/websearch/answer/7013866?hl=en-AU
[3] FTC, phishing protection: https://consumer.ftc.gov/consumer-alerts/2025/04/protect-yourself-phishing-scams
