Fake Walmart Order-Confirmation Phishing
Fraudsters send fake Walmart purchase-confirmation emails and texts to panic recipients into clicking a link that steals their Walmart account credentials or payment details.
Part of: Fake Order Confirmation Phishing Scams
Last reviewed: 7 June 2026
Walmart is among the most widely recognised retail brands in the United States, and its Walmart.com online marketplace handles millions of orders daily. Scammers exploit this scale by sending fake order-confirmation messages to random email addresses, knowing a significant proportion of recipients will be genuine Walmart customers.
The fake emails are styled to match Walmart's blue-and-yellow branding and often reference large electronics purchases — a flat-screen television, a gaming console, or a high-end laptop — to provoke alarm. The message includes a fake order number, a fabricated delivery address, and a prominent 'Cancel Order' button that links to a phishing page.
Some variants instead include a phone number to call, where scammers posing as Walmart support will attempt to gather personal information, banking credentials, or payment for a 'verification fee' to block the order.
How this scam works on the Walmart brand
Genuine Walmart order confirmations arrive from @walmart.com and contain the item names, the delivery address you registered, and a real order number traceable in Your Account on Walmart.com. Fake emails use lookalike domains (walmart-orders-confirmation.com, walmartshipping.net) and often omit or invent a delivery address.
The phishing page replicates Walmart's sign-in screen. Once credentials are captured, attackers may access saved payment cards, place genuine orders shipped to their own address, or sell the credentials. Some phishing pages skip the login screen and instead capture card numbers directly under the pretence of 'cancelling and refunding' the fraudulent charge.
SMS variants are also common: a text message claiming 'Your Walmart order #XXXXXXX has shipped — reply STOP to cancel' leads to a phishing site when the victim clicks the tracking link embedded in the message.
Common red flags
- Sender address is not from @walmart.com — watch for lookalike domains with extra words or characters
- The email does not include your registered delivery address or the last four digits of your payment method
- A phone number is provided to 'cancel the order' — Walmart's cancellation process is done online through your account
- Checking Walmart.com directly shows no such order in Your Account
- The 'Cancel Order' link resolves to a domain that is not walmart.com
- The message arrived by SMS with a link and you do not recall opting in to Walmart text notifications
How to protect yourself
- Go directly to Walmart.com or the Walmart app and check your Order History — if the order is not there, the email is fraudulent
- Never call a phone number printed in an unsolicited order email; find Walmart's real customer service number at walmart.com/help
- Enable two-step verification on your Walmart account via Account > Security
- Do not enter your Walmart password on any page reached via a link in an email — type walmart.com directly into your browser
- If you received an SMS with a tracking link, navigate to Walmart.com directly to track your real orders rather than clicking the link
How to report it
- Report phishing emails impersonating Walmart to [email protected]
- Report smishing texts by forwarding them to 7726 (SPAM) in the US
- File a complaint with the FTC at reportfraud.ftc.gov
- If financial loss occurred, contact your bank immediately and report to local law enforcement for a crime reference number
Frequently asked questions
How do I verify a Walmart order email is genuine?
Log in directly at Walmart.com and check your Order History. A real order will appear there with a matching order number. Also verify the sender's full email address ends in @walmart.com.
I received a Walmart order confirmation by text. Is that normal?
Walmart does send order updates by text to customers who have opted in. However, legitimate Walmart texts do not ask you to call a number to cancel or provide payment details. Always verify by logging into your account directly.