I've been receiving a ton of emails from AWS saying that I opened cases to increase sending limits, which I definitely didn't do. This started happening late at night and now I can't even log in to change my password because it's asking for MFA, which I never set up. I'm really worried about these hackers potentially running up charges on my account. I've been trying to contact customer support, but they want me to sign in first, which I can't do. Does anyone have any advice or assistance for me?
3 Answers
It sounds like the hackers may have stolen your password, changed it, and set up MFA without you knowing. They could be trying to use your account for spam by requesting sending limit increases. Unfortunately, without MFA enabled, AWS might not be too accommodating if there are charges. I recommend you reach out to support ASAP and see if you can recover your account! Also, once it's sorted out, definitely enable MFA and set up billing alerts to avoid this in the future.
I got an email from AWS asking for an alternative number to call me. They mentioned they received my request about increasing the limit but couldn't process it until I resolved some issues. I hope I can fix this before any real damage is done!
You should definitely use their support link to create a ticket right away. They allow you to contact support without needing to log in if your account is compromised. Also, check out the AWS sign-in troubleshooting article while you wait for their response—it might help you regain access to your account.
It's a tough situation to be in, but this is why you should always set up MFA as a first line of defense. It’s crucial for securing your accounts against hacks like this!
It's true! AWS should really enforce MFA for all accounts if they’re going to send out these warnings.

I tried using my phone number and email for recovery, but it's been super frustrating! I opened a case number but talking to someone is proving difficult.