Walmart customers who have received emails like the one below, which claim their accounts have been used to make an order, are asked not to click on the links in them. This is because cybercriminals are sending out fake and phishing Walmart emails to their potential victims claiming they have bought something from Walmart. The emails then claim the potential victims should click a link in the same email if they didn't make the order.
The "Thank You For Buying From Walmart" Phishing Scam
From: Walmart Order
Sent: Sunday, August 19, 2018 2:25 PM
Subject: Thank You For Buying From Walmart
Your Walmart account was use to make an order
Hi,
This letter is to advise you about the order we have which is addressed to you. You have 4 days to pick 4 in any Local Store Please, follow this link for more information about your order Walmart is wishing you Happy Day!
If you did not make this order , please follow us immediately and click here.
If you have any questions, please contact us and let us know how we can help. We appreciate the opportunity to assist you and look forward to your next visit.
Thanks,
Your Walmart.com Customer Care Team
Sign up for savings
Get Walmart values delivered to your inbox
Security & Privacy
Walmart protects your security and privacy. We will never ask for personal information (such as passwords or credit card numbers) in an email newsletter. If you receive such a request, please do not respond to the email. Learn more. See our Privacy Policy.
© 2018 Wal-Mart Stores, Inc. All rights reserved.
The link in the fake email goes to a fake Walmart website (order-checkout.info) that will ask visitors to sign-in with their Walmart account credentials. Now, any attempts to sign into the fak website will result in the visitors Walmart account credentials being sent to the cybercriminal behind the phishing scam.
Once the cybercriminals have received the stolen credentials, they will use it to hijack their potential victims' account and use them fraudulently.
Walmart customers who have already been tricked by the phishing scam are asked to change their passwords and contact Walmart for help.