The thieves are sending out bogus emails that look like they're from Amazon, telling buyers their order cannot be shipped.
When you click a link to confirm your information, an authentic-looking page with the Amazon logo asks you to enter your name, address and credit card information.
When you hit enter, the crooks receive your information and you are re-directed to the real Amazon.com.
The AARP is warning shoppers not to take the bait.
If you think there is a problem with your order, sign into the Amazon site directly and go to "Your Orders" to determine if there is a purchase that matches the details in the email.
If there isn't a match, it's not real, Amazon says.