Figured this group orders enough packages that maybe someone else has run into this issue. I had a 3rd party Amazon vendor place an order using my account info (credit card and address book info) without my knowledge. I never got an email notification from Amazon because I did not order it, so no email. I only learned about the order because FedEx emailed me with the shipping info, which was a shock. When I contacted Amazon they told me a 3rd party vendor placed the order. And it was a 3rd party vendor I have never used. Amazon did refund my account and was trying to cancel the order. But Amazon has not explained how a 3rd party vendor could place an order on my behalf, without me knowing. I did have 2 factor authentication enabled, no 3rd party apps on my iPhone. And have since changed my password and removed all credit card info from my Amazon account. I did find a similar incident in Europe in 2018 via Amazon forums. Has anyone else seen this or have any details on how this is possible?