This is a scam right? But I can't figure out how it works.

[perseides]

I'm trying to figure out whether an email that was sent to my girlfriend is a scam or a phising email, but I cannot figure out how does it work.

 

It was sent from Amazon: account-update@amazon.com

 

The link to approve or deny is https://www.amazon.com/a/c/*************************************************** (edited the link as it exposes my IP)

 

So my gf claims she does not have an amazon account. I'd tried to check with forget password with Amazon website and confirmed the email address does not exist.

 

 

 

I'm 99% sure this is a scam, but I cannot figure out how does this work? All the links seem legit and they're from Amazon.
 

Edited as the 2nd link exposed my IP/ location.

 

 

[8-Bit Ninja]

Click the link

Land on a login page that looks like it's the amazon one but isn't 

Login

They have your password 

[perseides]

3 minutes ago, 8-Bit Ninja said:

Click the link

Land on a login page that looks like it's the amazon one but isn't 

Login

They have your password 

Nope. I'd clicked on the link. It is not a link to ask for any password. 
It just brings me to something like this.

 

Clicking view details brings me this 

 

 

 

[Lurick]

You can spoof the sent from email very easily

[perseides]

Even if they're really spoofing the amazon sent address, I still don't understand what they're trying to do. 

 

There's nowhere where they ask me to key in the password/ email address. Just a button for me to deny to login.