So I get an email from password assistance saying: "We received a request to reset the password associated with this e-mail address. If you made this request, please follow the instructions below." Then another from Amazon saying: Thanks for visiting Amazon.co.uk! Per your request, we have successfully changed your password. Both looked genuine. My existing password did not work. I have since requested the password change myself and changed it within minutes. But how can they do that using my email? Surely they would need the link supplied in that email and it came to me. EEk seems I've just purchased a laptop at John Lewis - but I haven't !!!!