My wife had a genuine e-mail from Amazon saying they had detected a fraudulent transaction on her account, and she should expect an item for £400 to appear on her bank statement. She immediately contacted the bank, cancelled her switch card and took every precaution we could think by way of damage limitation.
We thought this was very helpful of Amazon, and when the debit eventually came through, we contacted them to say "OK, now please give us the money back". They wouldn't. They said we should argue it out with the bank, which we did. The bank gave us the money, then changed their mind and took it away again. We shouted some more, and eventually got the money back from the bank. Whether they ever managed to recover it from Amazon, I have no idea.
And I've still got no idea how Amazon could let someone use my wife's account to change the e-mail and delivery addresses then order £400 worth of goods. As far as I can see, the only thing my wife did wrong was to select a fairly weak password, but that doesn't explain how the fraudster actually got hold of the account details.
But I'm annoyed with Amazon about telling us they'd detected fraud, and then refusing to compensate us. Don't shop there any more
