I Accessed Your Amazon Account - It's For Your Own Good

A few weeks ago, I received an email confirming the purchase of a book from Amazon.com. Everything looked right, except for one thing: I never ordered the book. So I went digging. I contacted Amazom.com's online chat support to figure out my next steps (phone numbers are hard to find these days), then contacted an Amazon.com customer service specialist. Here's what I believe happened, which was confirmed by the specialist:

  • Some guy, changed the email address associated with his Amazon.com account
  • The changed email address was to an email address I have registered
  • The change of email address confirmation was sent to the new email address (mine)
  • This guy never knew of his mistake
  • I am receiving all his transaction information, including his shipping address and other personal details

The specialist seemed to 'get it' and told me she'd contact the guy and have him update his settings.

All well and good. Simple mistake. Simple solution.

Except, I've received more emails addressed to the same guy, to my email address. There's a communication gap here somewhere.

I'm tired of being in the middle of it (I have a conscious, blah). So, today, I've decided to do something about it.

Step One: I'm changing the password on the account.     Not My Amazon.com Account - Change Password Request     Done.     Not My Amazon.com Account Changed Password     Hopefully this will wake someone up.

I don't plan on accessing his account settings (see conscious, above), even though all the information has been sent to him / me via my email address. Instead, I'll give it a bit and hope he attempts to access his account and realizes something's amiss.

I can't believe Amazon.com allows password change notifications to be sent only to the new address. If the account is owned through a specific email address, and that email address is updated, shouldn't it be incumbent on the owner of the initial email address to confirm this change?

Odd, me (still) thinks.