Security experts say shoppers should go to Amazon directly through a browser instead of links from emails.