The OP says he is &quot;a security conscious user who follows the best practices like: using unique passwords, 2FA, only using a secure computer and being able to spot phishing attacks from a mile away...&quot; yet I do <i>not</i> think he enabled 2FA on Amazon.com. If he did customer service would not have helped the hacker pretending to be him. As their help page says, &quot;If you need help from Customer Service after enabling Two-Step Verification, you&#x27;ll need provide a security code similar to when trying to sign in to your account.&quot; <a href="https:&#x2F;&#x2F;www.amazon.com&#x2F;gp&#x2F;help&#x2F;customer&#x2F;display.html?nodeId=201596330" rel="nofollow">https:&#x2F;&#x2F;www.amazon.com&#x2F;gp&#x2F;help&#x2F;customer&#x2F;display.html?nodeId=...</a>