Amazon (AMZN) is hosting its annual Prime Day event this week. That means you’re likely scouring the e-commerce giant’s site and app for sales on everything from diapers to doorknobs if you pay the annual fee of $14.99 a month or $139 a year to be a Prime member.

But Prime Day isn’t only a major event for shoppers. It’s also an opportunity for scammers hoping to exploit the event’s massive popularity to steal Amazon customers’ data.

According to Check Point Research, the intelligence arm of cybersecurity company Check Point Software (CHKP), Amazon-related phishing attacks increased by 37% in the first few days of July alone in the run-up to Prime Day, based on a sample of corporate networks it tracks. The company predicts there will be 10 million phishing attempts related to Prime Day around the world this year.

Phishing attempts use e-mail to trick people into clicking malicious links or entering their information into phony websites with the intention of stealing private data including payment information.

“Amazon already is a big source of phishing for obvious reasons,” explained Mark Ostrowski, Check Point's head of engineering U.S. East. “But the first week of July was that pivot point where we saw a pretty substantial increase. An almost 40%...increase within one week of the amount of phishing campaigns that we saw."

For shoppers, threats include thieves making off with their Amazon login credentials, stealing their payment information, and gaining access to other private data.

But you can thwart these schemes by simply being more careful about which emails you open.

More Prime Day attention means more criminals go to work

Prime Day has become a summer constant since Amazon held the first event in 2015. With the exception of 2020, when Amazon held Prime Day in October because of the pandemic, the sale has gained more and more attention from shoppers and rival retailers looking to take advantage of increased consumer interest in sales during the time of year.