Feedburner Receive our consumer tips & recalls newsletter by e-mail
[X]
Feedburner count

58
Helpful
Votes

Walmart.com Account Hacked Gift Card Purchase Scam

Electronic Gift Card
Review by Pakettle on 2013-03-09
Rating: StarEmpty StarEmpty StarEmpty StarEmpty Star
During a trip when I had no internet access, my WALMART. COM account was logged into and a Gift Card for $170 was purchased and sent to an EMAIL account specifically set up to get the "gift card" (really just an electronic E-Mail). To make it seem more like I was the purchaser, a Music CD ($2.88) was shipped to the address on file in the account and the thief did not change my password. So, yes, I am at fault for storing a valid credit card with my account. I have deleted my credit card and subsequently deleted my account and made sure I have no other on line sites with credit card information.

I disputed this purchase with both my credit card company and WALMART. COM. WALMART has a policy that gift cards are non-refundable and refused to issue a credit.

My unanswered questions to Walmart are:
1. Why do you allow "gift cards" to be emailed? Or at least make them valid only after a certain period of time so they cannot be used immediately)?
2. Why don't you require the "security code" to the credit card?
3. Why not ask for a security question if the email address is not on file with the account.

I am positive WALMART knows of this scam, as I discovered this has been happening since early 2012. Just do a search on the internet for "WALMART. COM account hacked". At a minimum, WALMART should have sent an email to all of its customers warning them to remove credit card info from the account.

The worst part of this incident, is that WALMART accused me of lying - said that they were not hacked and I must have fallen for a "phishing" email.

The problem with that accusation is that I was in the IT business for 40 years, and recognize "phishing" when I see it. I have only made two purchases from WALMART. COM and my only mistake was storing credit card info.
Comments:
Posted by trmn8r on 2013-03-10:
I don't see how you can prove that WalMart's site was hacked versus someone simply got your login information.

I don't know how WalMart's site works; the few I use that keep my credit card on file do not require a security code.
Posted by clutzycook on 2013-03-10:
You did the right thing by removing the card from your account. You should also report the fraudulent activity to your credit card company if you have not done so already.
Posted by Gmorgan on 2013-03-10:
Same thing happened to me, $200 gift card purchased. Another friend had it happen as well. I printed out an identity theft form from Walmart and faxed it to Bentonville, they credited the $200 back within a couple of hours.
Posted by QuirkyKarma on 2013-03-11:
I made an order through their website on March 8th and tonight I got another e-mail thanking me for my order. Someone used my check card number to purchase a gift card from your site. They didn't just use my check card somehow my Walmart.com account was also used to make the order.

Luckily I was able to log into my account and cancel it right after I got the e-mail. If I hadn't be online at the time the order would have gone through! The e-mail it was supposed to be sent to was a Gmail e-mail which used a Vietnamese name.

I will be contacting WalMart Corporate Offices in the morning to see if I can get more information from their end about this order.
Posted by SusanV on 2013-03-11:
The same thing just happened to me on 3/6/13. Someone gained access to my walmart. com accout and added prepaid phone e-cards to my order. (I had added a couple of things to my cart the day before, but pt checked out.) They used the card I had on file. Fortunately, bot walmart. com and discover figured it was fraudulent and cancelled the order. It happened at 2:16am, and I did not see the "Thank you for your order" email until 7am. Plenty of time for the thief to get away!
Posted by kjsphat on 2013-03-11:
Thanks for the good review. After reading this, I immediately got into my Walmart.com account and deleted all my credit info on file.
Posted by k. hedrick on 2013-03-11:
just received something in the mail-Sim card from Walmart.com on 3/10/2013. I did not order this and went to check my Walmart.com account to see what was going on. When I tried to log in, it would not let me and told me there was no account associated with my email address. We called Walmart.com and were told that on March 6th someone changed our login email address and placed an order of $430.00 worth of prepaid phone ecards that were sent to an email address which they could not disclose. Apparently the same email address that they used when they changed my login information. Walmart will not tell me the email address that they used even though it is on my account. We had to get a new credit card with a new account number because we are afraid that they have access to our card to use anywhere now. I am so upset at Walmart's lack of concern. They sent me no email telling me that someone had changed my account login information. Usually, you would receive an email and it would tell you to let them know if this was not you. Needless to say, we have closed the Walmart.com account and are going to have our credit card deal with the fraudulent charges so that they are removed.
Posted by martfern on 2013-03-13:
I got hit on this, too; so this is not just you guys. Walmart is getting hit by hackers, all the time. This has NEVER happened with my Ebay or Amazon accounts. What pisses me off is that Walmart did not make it clear, over the phone, that they knew what was going on and instead kept asking me if I had bought these things.
Posted by Loopy on 2013-03-16:
Did they buy the gift card before the cd was delivered to your house?
Posted by Tip on 2013-03-17:
I logged into my bank account and notice a $200 purchase from Walmart.com Tried calling walmart and have not been successful in speaking with someone due to it being the weekend and after business hours. I tried logging into my Walmart.com account and was inform that my email address was not valid. So I logged into my email and see that on March 13 I received notification that my Walmart.com account information had been changed and then another $200 purchase for and E-Gift card. I immediately called by bank to have my account blocked. Very pissed with Walmart to say the least.
Posted by Stephanie on 2013-03-20:
I recently had my account hacked, March 14th, and spoke to a Walmart.com representative yesterday, March 19th, after having filed a complaint with the Better Business Bureau and the representative basically said its up to the customer to fit hackers and investigate and I wanted to ask her how the hell do customers investigate someone hacking their account? Mine was some kind of electronic card they ordered so Walmart.com should be able to track the email that got the card information or phone number, etc. that got it but the representative said they won't do anything but she will credit my credit card as a one time courtesy thing. Did several searches online and found several people have had their Walmart.com accounts hacked just this year and those are just the one that have complained so I'm sure that number is double or more. Seems for a company as large as Walmart, they would investigate and prosecute these hackers and take better security measures to prevent this from happening in the future. Poor customer service like I received shows that Walmart.com doesn't care about their customers or want their repeat business. And I got an email saying my Walmart.com account information has been updated and if I didn't initiate this, call them immediately and it gave a phone number and I called immediately and apparently they are not open 24 hours so I asked her what the point was of sending out an automated email to call immediately if they are not open? Just got a bunch of excuses. I sympathize with everyone who has had their account hacked and maybe if enough of us complain to places like BBB, Walmart will do something about it but I doubt it.
Posted by Wendy on 2013-03-22:
Happened to me this month! Walmart basically pointed me at my bank, and that dispute process is ongoing. Mine happened in the middle of the night on a Sunday and I did not know about it until the next morning - too late to cancel and on a weekend I could not speak with anyone either. They need to up their security and procedures to make this a less attractive pathway for thieves.
Posted by Shel on 2013-03-23:
It happened to me today. Someone logged into my Walmart online account, changed the shipping address, and ordered 3 video games. I stupidly kept my Discover card kept on file and it was used. Amazingly, WM canceled the order 10 minutes after it was placed. I didn't know about this until I checked my email hours after it occurred. I called Discover, card was canceled and gave them the address where order was to be shipped. Doubtful anything will happen to the individual who attempted fraud.
Posted by Donnie on 2013-03-23:
Happened to me yesterday. Somebody ordered a laptop. The first one didn't go through so they tried again. I would have never know this if I didn't sign up for text alerts from my bank. Every time my card is used I get a text. Saved me from a lot of headaches. Thank God the bank reversed the charges. Called Walmart and they just acted like it was just something that happened. It makes me so mad. Done a search of walmart.com hacked and there are tons of people this is happening too. You would think Walmart would do something about this. I spent 3 hours this morning changing my email and all my passwords. I will never will buy from walmart.com or any other site again.
Posted by Cass on 2013-03-25:
I woke up on 21st and there was an email stating I changed my Walmart.com information. I tried to log in and the site stated my email was not found in their system. I quickly logged into my bank account and found a $66 dollar charge from Walmart.com. I called their customer service department who was skeptical of me because part of the shipment was being sent to my house. I told the representative I couldnt log in and i didnt order anything. She cancelled part of the order but said the other part was emailed. She refused to provide me with what was ordered but did cancel my Walmart.com account. The representative even implied it was my fault my account was hacked into. As for a refund
Posted by EJ on 2013-03-26:
Add me to the list of those who have been defrauded via walmart.com! I woke up the morning of Sunday the 24th and found a confirmation email from walmart.com, thanking me for my purchase. I opened the invoice and a purchase had been made overnight using my stored debit card. The thief purchased a router, protection plan for the router, and $200 in eGift cards. The router was being shipped to my house, I presume as a decoy to make the order look legit and not draw the attention of walmart's fraud flags. The crook sent the eGift cards to a yahoo email address. I immediately cancelled the card, filed a police report, then called Walmart.com support. (Walmart's customer support lines are actually open starting at 7am on Sundays, BTW.) The lady on the phone actually did not act shocked at all by what happened and immediately went through the drill of shutting down my account and attempting to reverse the charges. That was unsuccessful, but luckily my bank is getting my money back. I sincerely believe that walmart.com's online customer database has been compromised, and I do not think that Walmart is taking steps to protect their customers. I firmly believe that walmart.com should be banned from selling eGift cards until they can get the fraud under control. Way too many people are being defrauded via this retailer. I believe a federal investigation should be launched. Also, the password I used for my walmart.com account was unique, and I use a Mac computer which is 100% malware free. I work in IT and I know how to protect myself. This is what leads me to believe that walmart.com's customer account information has been compromised by hackers.
Posted by RB on 2013-03-26:
Add me to the list, just received an email thanking me for my order...and an email identifying that my account information had been changed. Order was for oil of olay to my house, and two "email delivery" for Straight Talk unlimited Text, talk, and web access 30-day service. Each were valued @ $45.00.

I called Walmart.com, they told me "that the order did not pass all of their security features, and was not processed." Walmart would not confirm the email account
Posted by ABC123 on 2013-03-26:
I just checked my email today and received 2 emails from walmart.com yesterday. The first one stated that I have made change on my username, password, email address etc and the second one was about my order for Dog food and T-Mobile $50 Prepaid Mobile Broadband Pass. Total charge was $69.xx. I called Discover, and they said I was protected and not obligated to pay for this transaction. I also called Walmart.com and the customer service said she would try to stop but was not guaranteed that I would be all refund and I canceled my account with them. I will wait and see if I will get charge on my Discover or not..
Posted by So mad on 2013-03-27:
Just got off the phone with walmart and my bank. Same thing happened to me. They ordered phone cards to be sent through email (the email address they changed mine to) and an item from a marketplace seller to be shipped to me. I haven't gotten this resolved yet but have already contacted my bank. Walmart was less than helpful stating that you dont have to have the password for an account to change the email for said account. WTH??? I have never heard of this. I deleted my card from the account, but I did not close the account yet. I want to make sure the orders are canceled first. I have the email address they used, even though Walmart wouldn't give it to me. Not like that will help...ugh...such a hassle!!! I hate walmart!!
Posted by ex-customer now on 2013-03-29:
On Sunday 3/24/13 I got 2 emails from Walmart, one right after the other.
The first email thanked me for my order, the second said my account info had been changed.
A T-Mobile phone card was ordered to be delivered via email to a new email address, a small item, for a couple of dollars, also ordered, was to be delivered to my actual address.
I think this is done to make it seem like it was actually me ordering everything.
I called Walmart right away, within a couple minutes of the email, they sounded like they were being helpful, they said that they would cancel the order, they said they would close my account.
I was relieved.

Today, the small item I never ordered, arrived in my mail.
I looked online, my credit card was charged.
I canceled my CC today, and filed a dispute of the charges.
I can't see myself ever ordering from Walmart.com again.
Posted by A Frankpane on 2013-04-03:
DO NOT ORDER BY CREDIT CARD FROM "STONE" WALMART. IF YOU DO YOUR ASKING FOR TROUBLE
Posted by Lynelle Nowlin on 2013-04-03:
In October of 2012 after paying my Walmart bill on line I was about to close when a very large Walmart logo appeared on the screen.With that logo there was a request that I click on the next page which I did.There was a big fireworks display that said that I had won a $1000 dollar gift card and that I needed to click on the next step to claim my award.After clicking on several more steps I realized I had been duped but it was too late.A virus had been implanted into my system what wreaked havoc.I had to end up calling two diffrenet services to clean up my computer.I realized later that although the fake Walmart logo was extremely similar to the real Walmart logo,it indeed was a fake.I was told by a servicer that the hackers were monitoring everything I did on the computer in the hopes of catching me using account information that would allow them to hack into my bank accounts,etc.It was suggested and I did buy some virus and hack proof spyware that has worked marvelously ever since.My son had told me 2 years ago when I bought my computer to buy some protection but I did not want to spend the extra money.Now,I am grateful that the 45 dollar investment has paid off.
Posted by Really? on 2013-04-03:
Walmart, in general is pathetic. Sam Walton must be spinning in his grave! I personally boycotted Walmart when they refused to accept checks from my church so that I could purchase gift cards to replace my blood-damaged clothing when my nephew was brutally murdered in our home. They said, "Even if the finance person was present with the checks, they wouldnt accept them. I went elsewhere and got Master Card Gift cards. That is $1,000.00 and much other funds that Walmart wont get because of how they treated me. Stand your ground with them!
Posted by Security Code? on 2013-04-04:
Same exact thing happened to me! Two emails
Posted by LittleVoiceInSeattle on 2013-04-05:
I received an email from AmerExp on 3-24-2013 that someone was trying to charge at both Walmart.com and Frys.com using,y AmerExp card. I immediately shut down my Walmart.com account where Walmart had stored my card info. Then using the same ID and password I had used at Walmart.com I opened up the bogus Frys.com account set up by the thief(s). In that account there was a shipping address to an apartment in Houston, TX. I then called Fry's fraud department and told them to remove the account. Fry's did it immediately. Then I called Walmart and after quite a stall was finally connected to their fraud department. Walmart is not protective of their customer's identity or security! I also filed a police report with the Houston Police Department giving them all the information I had found from the Fry's account and researching the occupants of the shipping addressed. Luckily for me, American Express refused to honor the charges and nothing was shipped. I called AmerExp and sent them all the info from my research, and the two contacts with Fry's and Walmart. Lesson learned - absolutely no shopping again at Walmart.com or even the brick and mortar Walmart with any credit card. What will wake up the executives at Walmart to protect us? Only negative publicity - so please contact your local TV station consumer reporter and blab your sad tale to them (or newspaper or Internet blog such as this). A little voice can effect a big change if it causes enough negative publicity for Walmart.
Posted by Krystal on 2013-04-08:
I don't trust anything about Walmart. I like to avoid them. As Costco starts opening up, I hope he takes all Walmart business from them and those greedy crooks go out of business.
Posted by Happened to Me on 2013-04-08:
I had the same thing happen with the walmart.com account. I did not approve them storing my credit card number when I place an order about 1 month ago, but I guess they did anyway. Then last week I got the email that I had placed an order and that I had changed my email address.

The order was just under $50 so I assume I am going to be out that money since that is the amount I am at risk with the credit card company.

Now my email address is also being used by a person with a Houston, TX address.

I am very nervous what else this will lead to.

Big mistake using walmart.com in the first place.
Posted by MeToo on 2013-04-12:
This happened to me today. Two emails with products less than $5 along with $60 Virgin Mobile e-gift cards. Another email saying one of the orders could not be processed and cancelled. Then another saying my info had been changed on my Walmart.com account. Called my credit card company first who cancelled/disputed the charges and cancelled my credit card then called Walmart.com. Credit card company says I am fully protected from fraud, so hopefully everything is resolved from my end.
Posted by i got spam order last night too on 2013-04-24:
Receipt for $200 Walmart eGift card order came in my email last night. I discovered it 3 hours after the email was sent and I canceled the order immediately with Walmart. Walmart sent an automated email saying I had canceled before the order was filled so I wasn't charged the $200. I canceled my Walmart account and sent email to Walmart about my account being hacked. It's 12 hours later and I haven't heard from Walmart.
Posted by Update: I got spam order last night too on 2013-04-25:
Walmart responded to my canceling $200 spam with this message....

---------------
Thank you for bringing this unauthorized charge to our attention. We understand how scary this can be. Here are the steps we’ve taken to help protect you and the steps we recommend you take to protect yourself in the future.

We’ve sent a request to our Finance Department to lock the affected Walmart.com account and we’ve deleted any saved payment information from your Walmart.com account to help prevent future unauthorized activity.

If your credit card was charged for this unauthorized order, please contact your credit card issuer to alert them of unauthorized use and dispute any charges. Working with your credit card company is the best avenue to recover unauthorized charges and protect your account.

If you believe your physical credit card or credit card number has been stolen, please contact your credit card company to cancel the card. If someone has accessed your Walmart.com account, the only payment information that can be viewed there is your billing address and the last 4 digits and expiration dates of your credit cards.

If your Walmart.com account was affected, please reset your password:
Go to www.walmart.com
Click “My Account” in the top right corner
Click “Change Name, Email and Password”
If you use the same email address and password for accounts other than Walmart.com, we recommend changing your passwords at these sites as well. For additional information about our privacy and security policy, as well as online safety tips, please visit http://corporate.walmart.com/privacy-security/.
-------------
I hope this info can help someone else.
Posted by miamiblonde on 2013-04-29:
had the same thing happened to me.
i even got a confirmation email.
thank god the bank alerted me.
card was cancelled immediately.
tomorrow need to go appeal this.
they actually tried a second time to do this.
then i got an email from walmart that i left something in the cart.
and this is because i saved a credit card on my account.
no more.

Email to uifaadkins@hotmail.com
$200.00
Gift Options:
Emailed items do not have additional gifting options. Your customized message will be included in the email.
Subtotal: $200.00
Shipping: Free
Estimated Sales Tax: $0.00
Subtotal for this Shipment: $200.00
Purchase Summary

Order Date:
4/25/2013
Order Number:
2677023-xoxoxox
Subtotal:

$200.00

Shipping:

Free

Estimated Sales Tax:

0.0

Order Total:

$200.00
Posted by CaughtBySurprise on 2013-05-03:
I am a victim of this fraudulent activity just tonight (05/02/2013). I received an email thanking me for an order of a $100 egift card. I alerted Discover and had my account blocked and canceled. Then I called Walmart.com and they shut down my account but said they couldn't reimburse me because it was used/delivered already. She didn't seem to care all that much.

The email address that the eGift was sent to was shuba.rivers@aol.com

I also alerted my credit card company. They closed my account and will issue a new card to me.

Posted by Stephanie on 2013-05-03:
This just happened to me. I can't believe it. $190 gift card emailed to beussink.jeremy@yahoo.com. No idea who the scammer is. I called my credit card company and walmart and they said it will be refunded in a couple days. Ridiculous.
Posted by Colin Bennett on 2013-05-04:
Sadly one more. American Express called about suspicious charges and I saw the email confirming my order for $200 gift card to some AOL.com email, plus a $3 "foam ink pad" which actually showed up at my door today. What am I supposed to do with this package? Hardly worth returning it. Walmart you are so lame for not protecting your customer info! Like others, I have never had this happen on other sites like Target, Amazon, eBay, buy.com, new egg, Costco.com, etc....
Posted by Chuck on 2013-05-04:
Same thing happened to me last night. I was able to talk to a human, and it sounded like they were going to work on it. Hard to say from that. But, this morning, I went to the WalMar web site, and looed up eGift cards, and it said they were "not available at this time". Is this just me, or are others seeing this? Maybe they finally decided their security on these transactions stinks, and are going to work on improving that.
Posted by Joe P WPB on 2013-05-04:
Here's another one !! Yesterday afternoon I recieved three consecutive email order confirmations for Walmart eGift Cards, one was cancelled by Walmart the other two were allowed to go forward and be delivered. I called Walmart and they couldn't give me any answers as to how it happened and how 2 out of three were allowed to be delivered. I closed my account and did the same at the bank that issued the credit card which was used.
Posted by vista on 2013-05-04:
Yesterday Walmart called asking about a $200 purchase that I did not make. Then I logged into my Walmart.com account and found there were three $200 e-gift card purchases yesterday! Walmart only cancelled the last one. I call the credit company to reject all three transactions.

I deleted the saved credit card info on the account. But I don't understand why Walmart didn't ask for security code for a purchase.
Posted by Ashley on 2013-05-06:
It happened to me today, on a Sunday. I got an email stating that there was a purchase of cologne and 2 email card of straight talk service. I was napping when all that happened and a couple of hours later, when I checked my email, I got that notice. Also, I got another email that my account has changed, which I never did. I immediately called Wal-Mart and apparently I was told that I was charged twice ($115 each). Thankfully, one of the orders was cancelled and the other one was in progress. Unfortunately, the bank was closed. So, I'll have to call tomorrow to report this. Since I could access my Walmart.com account, I had them clear my credit/debit card info. Once I pick up my item from the store and get my funds back, I will call back and ask them to delete my account. Never again. I would rather pay a few extra dollars for something else at another website, than to have my piece of mind stolen from me. I made a post to all of my Facebook friends to not shop at Walmart.com.
Posted by Ashley on 2013-05-06:
Correction*
I couldn't access my account at the time of the issue. When I called and asked o cancel my order, I had them delete my credit/debit card info.
Posted by Rick on 2013-05-06:
Same thing just happened to me a Ashley same day. Called the bank this morning they are holding payment. waiting to call Walmart after they open up.
Posted by Claire on 2013-05-07:
This happened to me yesterday too! I did not get any confirmation email - I just happened to notice the charge when I checked my bank account online. I also got an email from walmart saying that my account info. had been updated - which I did not do! Walmart told me I was responsible for the charges because they were for egift cards that had already been sent. They also ordered a CD holder to be sent to my address so it all looked legit. Apparently Walmart automatically saves payment info and you have to clear it every time you shop to protect yourself!
Posted by Rain on 2013-05-07:
Yep! Same thing happened to me! Checked my debit card account, amount seemed low, saw a $93.91 charge from walmart.com... and it had been ages since I bought anything from there. Had a confirmation e-mail from them the night before for a purchase of 2 Boost Mobile e-gift cards for $40 each and a hair dryer which was sent to my local store for pickup. Disputed the charges with my bank, hopefully they can get my money back!!
Posted by Elena on 2013-05-09:
Same happened to me on 5/4 and my coworker on 5/9. Canceled my credit card right away. Wal-Mart wasn't surprised at all then I called them.
Posted by Venu on 2013-05-09:
Samething happened to my walmart account today 05/09. 2 orders were placed for at and t refill pin for total amount of more than $300. I am now working with my credit card company and walmart to resolve this.

And I have been doing online shopping for last 8 years and this is the first time ever happened to me. Make sure you delete all the payment details at the walmart.com account - there seems to be something going on at this site. (not a total security breach but to some internal / mini thief trying all this out in his own time)
Posted by Lyn on 2013-05-11:
Happened to me, too - had ordered from Walmart.com a few days ago, and then, today, I received 3 emails - 2 orders, each for a child's book and 2 Verizon refill cards, as well as an email notification that my email address and password had been changed. A long wait on hold, and then a CS rep cancelled the orders and I reset the password and deleted the credit card info. I will go back later to check that the orders are really cancelled. Yuck. I knew there was a reason I usually avoid Walmart.
Posted by Brandon on 2013-05-11:
Same thing happened to me. But when I went to try to logon I got bounced out with the person who hacked my accounts email address. So I tried using the original password and got back in. Changed my email back and changed the password to something new. Removed my credit cards and address too. They tried to order 2 $50 verizon wireless cards through email and a gardening tool to my physical address. Thankfully I found out my particular AMEX card that I didn't save but was there, doesn't work at walmart.com.

BTW this is the email that was used. nguyenkaka2131a123@yahoo.com
Posted by Brian on 2013-05-14:
Same thing here...got notice from Walmart.com that my account info had been "updated". I ignored it for a few days (bad idea) until I received a 12 pack of condoms in the mail from Walmart! Being happily married for nearly 39 years, I really don't need them!Tonight after reading these posts (and many others) I was able to log on using the new fake e-mail address and my old password. My actual e-mail address is no longer recognized by Walmart, which is OK since I won't EVER be using Walmart.com again! Anyway, the site showed me having purchased the above mentioned condoms (Durex Ultasensitive for those interested) as well as $60 phone card via e-mail.

Despite being the world's largest retailer, apparently Walmart cannot afford to hire human beings to answer phones at customer service during non-business hours. I have sent them e-mails regarding this. But, the smartest thing I did was notify my credit card company, Citibank. They were great, immediately backing out the charge and cancelling the card, while sending me a new one by Fed Ex. The other reasonably smart thing I did was change a bunch of passwords, since (not so smart) I used the same one at Walmart as I did many other places. The fake e-mail was: f.a.nkmoffattlucycy.air2217051983@gmail.com...feel free to send them a virus!

Your Name:
(displayed with your comment)

Your Experience/Advice:


Note: All comments are reviewed by a moderator before being published. Please be sure to read our guidelines before commenting.