[Filament]

That is really strange! Must mean they can see the MAC address

I don't think a web browser can get a user's MAC address. There are lots of other identifiable details, such as ip, cookies, user agent details, localStorage, etc.

It would be possible via IPv6 (w/ EUI-64 address), but that's not the case for most users.

Oh neat. Never actually spent time looking at what the different bits in the IPv6 address are. Seems like upgrading to IPv6 would just make SE'ing harder aha.

That is really strange! Must mean they can see the MAC address

The MAC address on your "device", doesn't travel beyond your local/Internal network.

For Instance, when your device connects to your Router, It's the "Router's MAC address" that's active. When the Router connects to your ISP and then the ISP establishes a connection to a server on the Internet, It's the "ISP's MAC address" that's visible.

Yep everything  the only similarity was that I refunded it on the same device

They may have Identified some sort of fingerprint- Canvas, WebGL, WebTRC etc.

Use another device and you'll be fine.

Admittedly, I don't know much about frontend, but aren't these just frontend rendering frameworks? Never heard of WebRTC, but from a quick google, it appears to just get video/audio. Wouldn't this require explicit permission in the browser? Either way, I'm genuinely curious how these leave a fingerprint of the user.

You should be fine.  I usually respond to them and they say they're just trying to understand account activity, thanks. Maybe take a break from refunds on that account though.

---

That is really strange! Must mean they can see the MAC address

I can confirm they do it, I had the same problem back in 2018.

I logged in using my mate’s PC, once they cancelled my account because of too any refund, his was deleted too without having done a single one.

I've said it before: Amazon only uses IP address to link accounts, nothing more.

Is this from personal experience or insider knowledge? Not that I doubt you or anything, but I find it hard to believe that they would only use IP address considering they have some great software engineers and have options to track their users in a variety of ways. This could help for scams, but also just for general marketing as well.