E-mails from Amazon will never ask you for personal information. If you receive a suspicious (sometimes called phishing) e-mail, here are some tips to determine if it's an e-mail from Amazon.com.
Don't open any attachments or click any links from suspicious e-mails. If you've already opened an attachment or clicked a suspicious link, go to Protect Your System.
Suspicious e-mails not from Amazon.com often contain:
Note: Go to Your Orders to see if there is an order that matches the details in the e-mail. If it doesn't match an order in Your Account, the message isn't from Amazon.
Note: Go to Your Account and click Manage Payment Options in the Payments section. If you aren't prompted to update your payment method on that screen, the message isn't from Amazon.
Note: If the "from" line of the e-mail contains an Internet Service Provider (ISP) other than @amazon.com, then it's a fraudulent e-mail.