This morning, I found an email from Walmart about a pickup order. I hadn’t placed an order, so I looked into it and discovered someone had used my Walmart account to buy household items and $90 worth of digital gift cards. I noticed my phone number had been changed too. I tried to cancel the orders, but you can’t cancel digital gift cards once they’re redeemed. I removed my credit card, reset my passwords, updated my phone number, and activated two-step verification for both my Walmart and Gmail accounts. I usually use unique passwords and a password manager. It seems my Gmail got compromised, allowing the scammer to create multiple Walmart accounts linked to one Gmail address. Gmail sees any variation with dots as the same email, but Walmart treats them as different. This bug in Walmart’s system enabled the scam. I found three extra Walmart accounts with similar orders. The credit card info only shows the card type, last 4 digits, and the name, so not a huge identity risk, but I could see billing addresses and phone numbers. Lesson: Regularly update passwords, avoid saving payment info on accounts, and use two-factor authentication. Edit: There is some identity risk as billing address and phone number are visible.
That’s a concerning situation, and it highlights a significant security flaw in how Walmart handles email addresses. It’s a good reminder for all of us to stay vigilant.
One thing I’d suggest in addition to what you’ve already done is to contact Walmart’s customer support directly. They need to be aware of this exploit in their system. It might not help you immediately, but it could prevent others from falling victim to the same scam.
Also, consider setting up email alerts for any account activity on your Walmart account. This way, you’ll be immediately notified of any changes or purchases, allowing you to act quickly if something suspicious occurs again.
Lastly, it might be worth checking your credit report to ensure no other accounts have been opened in your name. Stay safe out there!
Experiencing situations like this is truly unsettling. Given the circumstances, it is crucial to not only focus on updating credentials but also to look into possible preventive measures. Make sure to monitor all associated accounts and set alerts for any suspicious activity, which will help detect unauthorized access early. Also, regularly check your credit report for unrecognized transactions. You might want to consider talking to customer support at Walmart to report the exploit. Staying vigilant is key to avoiding similar scams in the future.
so sorry this happened to u! sounds really stressful. u did the right thing by enabling 2FA and changing passwords. consider checking ur other accounts too, just in case. it’s always gd to keep an eye on unusual activity regularly. take care!
thats crazy! scammers r getting smarter everyday. good job on fixing everything quickly. one thing tho - maybe contact walmart support directly? they shud know about this security issue w/ email variations. Stay safe out there buddy!