Interesting little story. I received an email to my inbox for an Amazon order I did not place. It looked like a legit order with all the links going back to Amazon.com. The only problem was the first name was wrong in the email. When I checked the To: line of the email it had gone To: my username+something@gmail.com which delivers to me, but a "criminal" had somehow been allowed to associate it with their amazon account. I checked my acocunt and did not see the order listed there (whew!) and I quickly had Amazon call me via the orders section of my Amazon account. They let me know that the fraudulent account had already been suspended and was being investigated. I removed some of the information from the screen shot below to protect the ongoing investigation. The person who handled my call was knowledgeable and professional. Nice work amazon, thanks for being all over it!