Walmart order verification scam: spot the fake order email or text

Quick answer

An email or text saying a Walmart order needs "verification" or was placed in your name is a likely scam. Don't click or call. Check your orders in your Walmart account, forward phishing emails to Walmart as an attachment, and report to the FTC.

All scam alerts
Comes by
Email, Text, Phone call
Pretends to be
Walmart
Last updated

How it works

Scammers send a message that looks like a Walmart order confirmation or a payment problem. It says an order was placed on your account, or that you must verify it, and gives a link or a phone number to dispute it.

The link leads to a fake Walmart login that steals your password and card details. The number connects you to someone who asks for account information, or for remote access to your computer.

Walmart's own guidance says a phishing email can look real, including the logo, domain and wording, and that urgency or an unexpected request is a warning sign. Hover over links to see where they go.

Red flags

  • An order you didn't place, with a link or number to "cancel" it
  • Urgent wording about verifying or losing your account
  • A link that doesn't go to walmart.com when you hover over it
  • A phone number in the message instead of your account's help page
  • A request for payment details or remote access to your computer
  • Generic greeting and mismatched sender address

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown sender to me
Walmart order #[number] for $[amount] is pending verification. If you didn't make this purchase, cancel it now at [link] or call [phone number]. Your account will be restricted within 24 hours.

What to do

  1. 1

    Don't click or call

    Open the Walmart site or app yourself and check your order history.

  2. 2

    Look for the order in your account

    If there's no such order, the message was fake. If there is an unknown order, use Walmart's chat support and type "Unauthorized Charges".

  3. 3

    If you gave details, reset your password

    Change your Walmart password and any other account that used it, then contact your bank or card issuer about charges you don't recognize.

  4. 4

    Forward phishing emails as an attachment

    Walmart asks you to forward the email as an attachment to the abuse address on its fraud alerts page, then delete it.

  5. 5

    Report it

    Report to the FTC, and to local police if you lost money.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Order scams go out to millions of emails and phone numbers. When the message uses your name or city, it usually came from a data broker listing or a breach. Serus finds where your address, phone number and email are listed on data brokers and people-search sites and removes them, and alerts you when your details show up in a breach, so fewer scammers can reach you.

More Walmart scams

All common Walmart scams

Frequently asked

Is a Walmart order verification email real?

Check your order history in your own Walmart account. If the order isn't there, treat the message as fake.

What if the email has the Walmart logo?

Walmart says phishing emails can copy its logo, domain and wording. Look at where links really go by hovering over them.

How do I report a fake Walmart email?

Forward it as an attachment to the abuse address on Walmart's fraud alerts page, then report it to the FTC.

I got charged for an order I didn't make.

Contact Walmart through its chat support and your bank or card issuer. Your financial institution is the best place to recover funds.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.