Walmart delivery scam texts: how to spot the fake order or package alert
Quick answer
A text or email that says a Walmart order or delivery has a problem and tells you to tap a link is a phishing attempt. Scammers pretend to be Walmart. Don't click. Check your order in the Walmart app or on walmart.com, and report the message to 7726 (SPAM) and the FTC.
- Pretends to be
- Walmart
- Last updated
How it works
Scammers pretend to be a store or shipper and send a delivery alert. The FTC describes the pattern: the message says you missed a delivery, or that your item can't be delivered until you update your street address or zip code. Some add urgency, saying the package goes back to the sender if you don't respond right away.
The fix is always a link. It leads to a spoofed website that looks real. If you log in or type in card details, scammers capture your username and password or your payment information. Other links can install malware on your phone that steals personal and financial information without you noticing.
What they want is your logins, card numbers and enough personal detail to take over accounts or open new ones. The FTC also notes scammers may sell your information to other scammers.
Red flags
- A delivery or order problem for something you didn't order
- A link to "update your address" or pay a small redelivery fee
- Urgency: act now or the package is returned
- A generic greeting and a sender number or address you don't recognize
- A request for card details, a password or other account info by text
- A link that doesn't go to walmart.com
Example message
Walmart: your package could not be delivered because the address on file is incomplete. Update your details within 24 hours or the order will be returned: [link]
What to do
- 1
Don't tap the link or reply
Legitimate companies won't ask for account information by text. Replying, even with STOP, tells the sender your number is live.
- 2
Check your order directly
Open the Walmart app or type the website address yourself and look up your order. Don't use a phone number or site from the message.
- 3
Report and delete the message
Forward the text to 7726 (SPAM) and report it at ReportFraud.ftc.gov. You can also report junk in your messaging app, then delete it.
- 4
If you entered a password
Change that password right away, and anywhere else you used it. Turn on two-step verification on the account.
- 5
If you entered card details or personal information
Call the number on the back of your card and ask them to block or replace it. Then go to IdentityTheft.gov for steps based on what you shared.
- 6
If you think you installed something
Update your phone's software, run a security scan and remove anything it flags.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Delivery scams are sent in bulk, but the ones that name you or mention a real address work better. That detail is easy to pull from people-search sites and data breaches. Serus finds the people-search sites and data brokers that list your phone number and address and removes you from them, and alerts you when your details show up in a breach, so fewer scammers can reach you.
More Walmart scams
Frequently asked
Is Walmart sending these texts?
No. Walmart is the company scammers pretend to be. If you're unsure whether a message is real, check your order in the Walmart app or on walmart.com instead of using the message.
I don't have a Walmart order. Why did I get this?
Scammers send these alerts to huge lists of numbers and count on a few people having a pending order. Getting one doesn't mean you were hacked.
Should I reply STOP?
No. Don't reply at all. Report the message to 7726 (SPAM) and the FTC, then delete it.
I clicked the link but entered nothing. Am I OK?
Probably, but update your phone's software and run a security scan in case the link tried to install something. Watch your accounts for odd activity.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
