A text says your Amazon or Costco order was "recalled": tap that refund link and your password goes to a scammer

What's going on?

A text lands on your phone: the air fryer or baby seat you bought was "recalled for a safety issue." Sign in through the link, it says, and your full refund is on the way. Careful people — especially parents and grandparents — want to act right away. That instinct is exactly what this scam feeds on.

First, the real thing. A product recall happens when an item turns out to be unsafe: the company pulls it, and buyers get a repair, a replacement or a refund. Official consumer-product recalls are posted at cpsc.gov/Recalls, the site of the U.S. Consumer Product Safety Commission (CPSC).

Scammers piggyback on that real process. On April 1, 2026, the AARP Fraud Watch Network — part of AARP, the association for Americans 50 and older — warned that its helpline had seen a spike in "recall scams." The fake messages pose as retailers everyone trusts — Amazon, Costco, Walmart. But the link doesn't go to the retailer. It goes to a look-alike login page built to harvest your email, password, sometimes your card number. That's phishing: fake bait designed to hook your credentials.

If your family orders from Amazon or makes Costco runs — familiar names to families around Bolsa — this text may well land sooner or later.

How the scam works

To dodge the trap, look at it one step at a time. It usually runs in four.

Step 1. A text or email arrives that looks like an official retailer notice — in AARP's words, it "looks official and urgent."

Step 2. It pushes you to sign in for a refund. AARP quotes a sample: "To ensure your safety and process your full refund without delay, please sign in to your account through the official website and review your order below."

Step 3. The link opens a fake login page dressed up like the real one. Whatever you type — email, password, card number — goes straight to the scammer.

Step 4. They can take over the shopping account and spend with the card saved inside it. They may then try that same password on your email and bank accounts. People who reuse one password everywhere get hurt the worst.

Real recall or fake?

Once you see the play, the next question is how to tell a genuine recall notice from a fake.

Real recalls tell you to STOP USING the product. According to AARP, legitimate recalls typically advise you to stop using the item — they don't demand instant action through a link.

Fakes rush you and dangle money. The urgency is there so you tap first and think later. The refund is the bait.

Real recalls are public. Check cpsc.gov/Recalls, the source AARP points to. A "recall" that isn't listed there deserves heavy suspicion.

Check in the retailer's own app, never through the text. If your order truly has a problem, your account on the official app or site will show it.

What to do

Knowing real from fake is half the job. Here are the steps — and the numbers worth saving.

Don't tap the link or call the number in the text. Open the app, or type the address yourself: amazon.com, costco.com, walmart.com. Look-alikes with extra words or a different ending — amazon-recall.com and the like — are not the real thing.

Look up the recall at cpsc.gov/Recalls. The site comes in English, Spanish and Chinese — no Vietnamese yet, so older relatives may need a hand.

Report the scam at ReportFraud.ftc.gov, the Federal Trade Commission's official fraud-reporting portal.

Already typed your password into a fake page? Change that password now, then every account that shares it, starting with your email and bank account. Watch your card statements for the next few weeks.

Need a human?
AARP Fraud Watch Helpline (free, staffed by fraud specialists):
877-908-⁠3360
Local police (non-emergency):
Westminster: (714) 548-⁠3212
Garden Grove: (714) 741-⁠5704
Fountain Valley (dispatch): (714) 593-⁠4483
Fountain Valley (department main line): (714) 593-⁠4485

One beat ahead

This scam doesn't follow the news cycle. AARP flagged it on April 1, 2026. The formula it warned about is simple: a safety scare, plus urgency, plus a fake login page.

Families around Bolsa are exactly the audience it wants — Costco runs in Garden Grove and Fountain Valley, Amazon boxes at the door. If you're the son, daughter or grandchild reading this, send it to your parents — and show them how to open the official app instead of tapping a link. Knowing the play one beat early is the whole game.