The Gift (Walmart Bag) Scam

Author: Trend Micro

December 13, 2023

Creating fake Walmart giveaways or gift card campaigns is a favorite tactic of scammers. Recently, a new round of scams has been spreading on Facebook — and readers are advised to be on the lookout. Walmart giveaway scams typically involve scammers posing as Walmart, or third-party representatives via Facebook pages, and informing individuals that they have won a prize or gift card from the company.

Below are recent suspicious examples from Facebook.

The Gift (Walmart Bag) Scam on Facebook

Watch out for the following wording in Facebook posts:

  • “𝖳𝗁𝖾 𝗀𝗂𝖿𝗍 (𝖶𝖺𝗅𝗆𝖺𝗋𝗍 𝖻𝖺𝗀) 𝗂𝗌 𝗄𝗇𝗈𝖼𝗄𝗂𝗇𝗀 𝗈𝗇 𝗒𝗈𝗎𝗋 𝖽𝗈𝗈𝗋 𝗍𝗈𝗆𝗈𝗋𝗋𝗈𝗐 𝖩𝗎𝗌𝗍 𝗉𝗎𝗍 𝖣𝗈𝗇𝖾, 𝖭𝗈 𝗌𝖼𝖺𝗆.. 𝖳𝗁𝗂𝗌 𝗂𝗌 𝗋𝖾𝖺𝗅”
  • “… Just put [YES ], No scam.. This is real”
  • “Get Your 2 Walmart Gift Card.. Click this link, Submit your Gmail & Zip code to get your gift. Quickly Click here”

Walmart Giveaway Scams

The scammers use various tactics to trick people into providing personal information, money, or both. Common characteristics include:

  • Fake notifications: victims might receive unsolicited emails, texts, or phone calls claiming they have won a prize or gift from Walmart. Watch out for grammatical errors and strange layouts.
  • Claiming the prize: the scammers inform the victim that they have won a prize, such as a gift card, money, or a high-value item. This is the lure to engage the would-be victim.
  • Personal info needed: the victim is asked to provide personal information to claim the prize. Scammers can use this information for identity theft.
  • Payment demands: scammers often ask for payment or fees upfront, claiming it’s necessary for processing or delivering the prize.
  • Social engineering tactics: scammers often use urgency and pressure tactics by claiming that the prize is time-sensitive or that the victim must act quickly to claim it.

The Gift (Walmart Bag) Scam on Facebook

This year, a study found that Walmart was the brand most commonly used in phishing scams, with a noteworthy 16%, followed by DHL at 13%:

  • Walmart (16%)
  • DHL (13%)
  • Microsoft (12%)
  • LinkedIn (6%)
  • FedEx (4.9%)
  • Google (4.8%)
  • Netflix (4%)
  • Raiffeisen (3.6%)
  • PayPal (3.5%)

 In our scam research at Trend Micro, these figures are very much aligned. Walmart scams are tricky because the company does indeed carry out legitimate giveaway campaigns, lending an air of credibility to the scams. For advice and information from Walmart, head over here. In their own words:

“Walmart offers a survey, located at survey.walmart.com, from invitations appearing on receipts in our stores. Customers are offered entry to the survey through register receipts or emails from our survey team […] You also may receive Walmart surveys related to other services that you use, such as Online Grocery or Pharmacy […]

“Winners are notified via phone and certified mail. Gift cards are not given away through Twitter, Facebook, or text messages. If you receive a notice through one of these channels, it is likely a scam.”

Safety Tips

  • Verify: only send money to people and brands you trust.
  • Beware of too-good deals: if it seems too good to be true, it probably is.
  • Guard against scams: be cautious of unsolicited texts, emails, and calls. Walmart won’t ask for personal information via text.
  • Secure your accounts: set up two-factor authentication for an added layer of security.
  • Privacy settings: review and adjust your privacy settings on all accounts held.

Protecting Your Identity and Personal Info

Compromised personal data can have serious consequences, including identity theft, financial fraud, and job losses. The best thing you can do is a) have reliable cybersecurity protection, and b) ensure you will find out ASAP in the event of being affected. We would encourage readers to head over to our new ID Protection platform, which has been designed to meet these challenges.

ID Protection Features

With ID Protection, you can:

  • Check to see if your data (email, number, password, credit card) has been exposed in a leak, or is up for grabs on the dark web;
  • Secure your social media accounts with our Social Media Account Monitoring tool, with which you’ll receive a personalized report;
  • Create the strongest tough-to-hack password suggestions from our advanced AI (they’ll be safely stored in your Vault);
  • Enjoy a safer browsing experience, as Trend Micro checks websites and prevents trackers.
  • Receive comprehensive remediation and insurance services, with 24/7 support.

 Offering both free and paid services, ID Protection will ensure you have the best safeguards in place, with 24/7 support available to you through one of the world’s leading cybersecurity companies. Trend Micro is trusted by 8 of the top 10 Fortune 500 Companies — and we’ll have your back, too.

This article is published in collaboration with Trend Micro

 

Image source: Unsplash.com

Report a Scam!

Have you fallen for a hoax, bought a fake product? Report the site and warn others!

Help & Info

Popular Stories

As the influence of the internet rises, so does the prevalence of online scams. There are fraudsters making all kinds of claims to trap victims online - from fake investment opportunities to online stores - and the internet allows them to operate from any part of the world with anonymity. The ability to spot online scams is an important skill to have as the virtual world is increasingly becoming a part of every facet of our lives. The below tips will help you identify the signs which can indicate that a website could be a scam. Common Sense: Too Good To Be True When looking for goods online, a great deal can be very enticing. A Gucci bag or a new iPhone for half the price? Who wouldn’t want to grab such a deal? Scammers know this too and try to take advantage of the fact. If an online deal looks too good to be true, think twice and double-check things. The easiest way to do this is to simply check out the same product at competing websites (that you trust). If the difference in prices is huge, it might be better to double-check the rest of the website. Check Out the Social Media Links Social media is a core part of ecommerce businesses these days and consumers often expect online shops to have a social media presence. Scammers know this and often insert logos of social media sites on their websites. Scratching beneath the surface often reveals this fu

So the worst has come to pass - you realise you parted with your money too fast, and the site you used was a scam - what now? Well first of all, don’t despair!! If you think you have been scammed, the first port of call when having an issue is to simply ask for a refund. This is the first and easiest step to determine whether you are dealing with a genuine company or scammers. Sadly, getting your money back from a scammer is not as simple as just asking.  If you are indeed dealing with scammers, the procedure (and chance) of getting your money back varies depending on the payment method you used. PayPal Debit card/Credit card Bank transfer Wire transfer Google Pay Bitcoin PayPal If you used PayPal, you have a strong chance of getting your money back if you were scammed. On their website, you can file a dispute within 180 calendar days of your purchase. Conditions to file a dispute: The simplest situation is that you ordered from an online store and it has not arrived. In this case this is what PayPal states: "If your order never shows up and the seller can't provide proof of shipment or delivery, you'll get a full refund. It's that simple." The scammer has sent you a completely different item. For example, you ordered a PlayStation 4, but instead received only a Playstation controller.  The condition of the item was misrepresented on the product page. This could be the