Overview
The victim expects to have a legitimate replacement for a product that they believe has been recalled, for example for safety reasons.
How It Works
The scammer sends a message claiming that the victim has purchased a product that has been recalled for safety reasons, or that the victim is owed a refund on a product that they purchased.
The scam is that if the victim replies or clicks the provided link, the victim will either be sent to a phishing page where they risk downloading malware, or they may have their personal data or financial data stolen.
The scam is generally a "spray and pray", broadly disseminated attack. However, there is a regional aspect to this, as product retailers are regionally dependent. So the scammer may impersonate a retailer in the victim's area.
Related Articles
Consumer Reports: Recall notice text message scams, video, WISN April 8, 2026
Amazon Recall Text Message Scam, The Sun
Amazon Shoppers Warned About Text Scam, GeekSpin
Synthetic Examples
2.1.6 Sample Data 1 - count: 300. With fake URLs and random, fake phone numbers
2.1.6 Sample Data 2 - count: 617. With fake URLs and random, fake phone numbers
2.1.6 Sample Data 3 - count: 617. Same as Sample Data 2, but with [url] and [phone]
Related Crime Schemes
A particular instance of this scam may embed one or more of these related schemes.
Data Loss: Any scheme that results in victim losing data/scammer stealing data. Data in this context can mean login credentials, credit card details, or other personal or corporate information.
Fraudulent Platform: Any scheme that relies on custom built software that assists the crime. Includes fraudulent trading platforms, fraudulent clickworking platforms, and the like.
Victim Targeting Context
The scammer may use one or more of the following techniques to reach the victim.
Spray and Pray / Scattered: The scammer approaches many victims at once such as through bulk email or SMS.
Semi-Targeted Regionally: The scammer approaches people in a certain region, for example by area code (toll scam) using semi-targeted email or SMS.
Social Engineering: Psychological Manipulations
The scammer may use one or more of these psychological techniques to accomplish the scam.
Threat: The scammer employs threats to increase fear in the victim so that they will go along with the scam. Threats can include financial loss, legal action, arrest, account closure, extortion, blackmail.
Urgency: The scammer employs urgency to increase the likelihood that the victim will take action.
Social Engineering: Impersonation Techniques
The scammer may impersonate one or more of the following groups as part of the scam.
Business or NonProfit: The scammer impersonates a business or nonprofit.