Heads up — a phishing "escalation" scam using a fake "esc-amazon" address (not Amazon)
Sharing this in case it helps someone. This is our read on it — if we've got something wrong, we're glad to be corrected.
We got a buyer-seller message from a "Business Buyer" with no order attached. It posed as a fellow seller who'd been through lost-inventory pain, and said the way to get Amazon to escalate faster was to email your case to an outside address at "esc-amazon dot com" — store name in the subject, your latest Case ID in the body.
Before doing anything, we looked into that domain. Here's what we found, and why we believe it isn't legitimate:
- The "esc-amazon" domain appears to have been registered in December 2025, with the owner hidden behind a privacy shield and its mail hosted overseas.
- Amazon's real domain has been registered since 1994 and is owned by Amazon.
- As far as we know, Amazon doesn't route seller escalations to any outside email address — that happens inside Seller Central / Account Health.
So our read is that it's a phishing attempt after your store name and open Case IDs, meant to pull you off-platform. We could be wrong, but that's where the signs point.
If you see one, what we'd suggest:
- Don't email the address or reply with details.
- Use Report Message in buyer-seller messaging, then "It has phishing links or suspicious attachments."
- Consider reporting the domain to its registrar's abuse team, and to the Anti-Phishing Working Group (APWG); internet fraud can be reported to the FBI's IC3.
- Trust Amazon messages only when they come from Amazon directly or inside Seller Central.
And watch the pattern, not just this address: a "buyer" with no order who points you to an outside email or phone to "escalate faster."
If anyone knows this is actually legit or has better info, please chime in — happy to be corrected.
Heads up — a phishing "escalation" scam using a fake "esc-amazon" address (not Amazon)
Sharing this in case it helps someone. This is our read on it — if we've got something wrong, we're glad to be corrected.
We got a buyer-seller message from a "Business Buyer" with no order attached. It posed as a fellow seller who'd been through lost-inventory pain, and said the way to get Amazon to escalate faster was to email your case to an outside address at "esc-amazon dot com" — store name in the subject, your latest Case ID in the body.
Before doing anything, we looked into that domain. Here's what we found, and why we believe it isn't legitimate:
- The "esc-amazon" domain appears to have been registered in December 2025, with the owner hidden behind a privacy shield and its mail hosted overseas.
- Amazon's real domain has been registered since 1994 and is owned by Amazon.
- As far as we know, Amazon doesn't route seller escalations to any outside email address — that happens inside Seller Central / Account Health.
So our read is that it's a phishing attempt after your store name and open Case IDs, meant to pull you off-platform. We could be wrong, but that's where the signs point.
If you see one, what we'd suggest:
- Don't email the address or reply with details.
- Use Report Message in buyer-seller messaging, then "It has phishing links or suspicious attachments."
- Consider reporting the domain to its registrar's abuse team, and to the Anti-Phishing Working Group (APWG); internet fraud can be reported to the FBI's IC3.
- Trust Amazon messages only when they come from Amazon directly or inside Seller Central.
And watch the pattern, not just this address: a "buyer" with no order who points you to an outside email or phone to "escalate faster."
If anyone knows this is actually legit or has better info, please chime in — happy to be corrected.
0 replies
Josh_Amazon
Hello @Seller_6mQJzTi281PKp,
Thank you for sharing this with the community. This is valuable information and a good reminder to always verify the source of any communication before taking action. Sellers should only trust messages that come directly from Amazon within Seller Central.
Kind regards,
-Josh
Seller_Lg4mBXF35fU5u
Does it also mention "Silver Oak LLC" for some mysterious reason? Other sellers have posted about this as well.
Seller_2srXkS44rN39i
thank you. I just got one in my selling account. I'm not even sure how they connected my forum ID with my selling ID
Seller_Ve1oyxgXsxGMC
Just wanted to drop a thank you. I was messaged related to a post I made on the forums. The message pretended to be another seller who had a similar issue and told me to email joseph esc-amazon. I didn't realize what was happening and emailed this person and they redirected me to Levon at 24appeal.
I got suspicious and then found this. Thanks for the help.
Michelle_Amazon
Hello @Seller_6mQJzTi281PKp, @Seller_2srXkS44rN39i, @Seller_Ve1oyxgXsxGMC,
Thank you all for sharing this phishing email attempt. Can you please share the date that you received these messages in your Buyer-Seller Messages and any Seller Support case ID's that you have created for this issue so I can look into this further?
Looking forward to hearing back from each of you!
Michelle
Seller_oU8CoBWkWM9qz
Received a similar message as well. The tip off was atl-Amazon.com domain. I also reported the account to Amazon fraud department.