Top 4 Text Message Phishing Scams of the Week: Walmart, DPD, Amazon, and More!
Author: Trend Micro
This article is from Trend Micro.
SMS phishing, text message phishing, and “smishing“? These terms all mean the same thing – they are the scams cybercriminals use to try to steal your personal information using messages with phishing links. This article will introduce 4 SMS phishing scams in detail, including ones related to Walmart, DPD, Amazon, and an unknown “payment sent” notification. Have you ever seen anything similar in your inbox? Check out how these viral scams work and learn the tips to avoid them!
Walmart Shipping Scam
Last week we saw Walmart online survey scams. However, these phishing text messages have taken on a new form. This week we’ve detected over 4,000 phishing URLs embedded in fake Walmart text messages in which scammers prompt you to click on a phishing link, falsely claiming that you have to “confirm” or “arrange” your package delivery through it:
- Notice from Walmart: Your gift will be returned if not confirmed by today <URL>
- Notification from Walmart: Grace, you have received (1) parcel. Please arrange for collection before its returned to sender. <URL>
Unlike the online survey scams we have reported on before, there is neither a questionnaire nor an online form to fill out. Instead, these scam text messages lead you to a page that says you’re a lucky winner directly:
The fake page says you’ve won an iPad Pro, but that you have to enter some detailed personal information before you can arrange delivery, including your phone number, address, and even credit card information. Obviously, you’ll never get to see that iPad Pro, and your sensitive data will end up in the scammers’ hands!
DPD Phishing
Besides Walmert, delivery companies such as FedEx, DHL, and DPD are also regularly impersonated by scammers conducting phishing scams. Have you received a text message from DPD that says your package hasn’t been delivered successfully? Be cautious and don’t click on anything!
Scammers prompt you to “book a redelivery” via a phishing link attached:
DPD SMS phishing. Source: Twitter
Content
DPD:We are sorry your parcel cannot be delivered due to an unpaid shipping fee. Visit: hxxps:// dpd[.]deliverv6tl.c om/fee/to book a redelivery.
If you click on the phishing link, you will be taken to a phishing website (e.g. fake DPD site) where scammers can record any information you enter. You will probably be asked to pay money for “delivery” and thus have your credit card information stolen.
“You just sent a payment” Notification Scam
Got a strange text message that reads something like “You just sent a payment to David Williams for $19.50 USD. We couldn’t confirm it’s you, Sign in for more detail?” Lots of people have reported seeing similar messages containing suspicious bit.ly links recently. Again, don’t click on anything!
"You just sent a payment” notification phishing. Source: Reddit
Scammers falsely claim that you have “sent a payment” to somebody and encourage you to click on the embedded link. The link is, as you might’ve guessed, a phishing link. If you click on it, you will be led to a phishing page where scammers trick you into entering personal credentials which they will use to commit identity theft!
Amazon Survey Scam
Here comes our old friend – Amazon scams. Amazon scams have been popular with scammers looking to exploit people for a long time. With various excuses, scammers try to prompt you into clicking on the phishing links in their text messages. Here are some examples:
1. Package delivery/Amazon Global selling:
Amazon: Your order #4323316 status changed – Delivered! Track here: <URL>
Delivered: Your Amazon package with Jolen creme bleach pot 30ml was delivered. More info at <URL>
HI, Make in India & Ship to the world. Register Now with Amazon Global Selling <URL>
2. Account security alerts/payment notification:
Open Digital Savings A/c by Axis Bank in just Rs. 590 & fund later. Get flat 5% extra cashback on Flipkart & Amazon. Open now <URL>
Your Amazon customer account will be useless due to abnormal access, please check your personal inform in Iink: <URL> to restore.
3. Job hunting:
3rd Job match: Amazon Delivery Service Partners (Various DSPs Hiring) wants to hire you! – <URL>
4. Amazon Prime membership:
there is a problem with the payment method of [amazon] prime membership fee, please check at <URL> to update
the payment method of amazon prime membership fee is abnormal, please update:<URL>
So, what happens if you click on any of the links?
In some cases, you will be taken to an online survey page and eventually asked to enter sensitive personal information, such as banking details:
Or, you will be taken to a fake Amazon login page and asked to enter login credentials. This one looks really convincing, but the URL is the giveaway:
If you fall for any of their tricks, scammers will record the data you provide and use it to transfer all the money out of your bank account, gain access to your online accounts, or even use it for identity theft!
How to Protect Yourself
- Double-check the sender’s mobile number/email address.
- Reach out to the official website or customer support directly for help if you think there are issues with your account.
- NEVER click links or attachments from unknown sources. Use Trend Micro Check to detect scams with ease!
Send a link or a screenshot of suspicious text messages to Trend Micro Check on WhatsApp for immediate scam detection:
Trend Micro Check on WhatsApp
Trend Micro Check is also available as a Chrome extension.
It will block dangerous sites for you automatically:
Trend Micro Check on Chrome
Download Trend Micro Maximum Security for even more protection, including Web Threat Protection, Ransomware Protection, Anti-phishing , and Anti-spam Protection. Gain access to the Privacy Scanner for Facebook and Twitter, Social Networking Protection, and Parental Controls, too. Click the button below to give it a try:
Did you successfully spot the scams? Remember, always CHECK before giving out personal information.
If you found this article helpful, please SHARE to protect your family and friends!
Report a Scam!
Have you fallen for a hoax, bought a fake product? Report the site and warn others!
Scam Categories
Help & Info
Top Safety Picks
Your Go-To Tools for Online SafetyDisclaimer: Some of the links here are affiliate links. If you click them and make a purchase, we may earn a commission at no extra cost to you.
- ScamAdviser App - iOS : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on iOS
- ScamAdviser App - Android : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on Android.
- NordVPN : NordVPN keeps your connection private and secure whether you are at home, traveling, or streaming from another country. It protects your data, blocks unwanted ads and trackers, and helps you access your paid subscriptions anywhere. Try it Today!
- Incogni : Incogni automatically removes your personal data from data brokers that trade in personal information online, helping reduce scam and identity theft risks without the hassle of manual opt-outs. Reclaim your privacy now!
Popular Stories
As the influence of the internet rises, so does the prevalence of online scams. There are fraudsters making all kinds of claims to trap victims online - from fake investment opportunities to online stores - and the internet allows them to operate from any part of the world with anonymity. The ability to spot online scams is an important skill to have as the virtual world is increasingly becoming a part of every facet of our lives. The below tips will help you identify the signs which can indicate that a website could be a scam. Common Sense: Too Good To Be True When looking for goods online, a great deal can be very enticing. A Gucci bag or a new iPhone for half the price? Who wouldn’t want to grab such a deal? Scammers know this too and try to take advantage of the fact. If an online deal looks too good to be true, think twice and double-check things. The easiest way to do this is to simply check out the same product at competing websites (that you trust). If the difference in prices is huge, it might be better to double-check the rest of the website. Check Out the Social Media Links Social media is a core part of ecommerce businesses these days and consumers often expect online shops to have a social media presence. Scammers know this and often insert logos of social media sites on their websites. Scratching beneath the surface often reveals this fu
How do I recover my crypto after it’s stolen? What happens if your crypto wallet is compromised? Can stolen crypto be traced, and can police actually recover crypto in 2026? These are the questions most people ask within minutes of realizing their wallet has been drained. Crypto theft is fast, quiet, and unforgiving. By the time most victims notice something is wrong, the funds are already moving across the blockchain. Once seen as a problem for exchanges and whales, crypto theft now heavily affects everyday investors. Phishing links, fake support chats, wallet approval scams, SIM swaps, and malware attacks have become common. Knowing what recovery realistically looks like—and what it doesn’t—can prevent panic, bad decisions, and costly follow-up scams. In a Nutshell Crypto recovery is possible, but only in limited situations Blockchain transactions are irreversible, but stolen crypto can still be traced Speed and documentation matter more than optimism Police and exchanges play a bigger role than private recovery services Guaranteed recovery offers are almost always scams Is it Actually Possible to Recover Stolen Crypto? Yes, crypto recovery is possible, but only under specific conditions and rarely through direct action by the victim. Blockchain transactions are final by design. Once crypto is sent and confirmed, it cannot be reversed. There is no central authority, no chargeback process, and no technical “undo” button, even if the transaction was clearly fraudulent. This is where many people ask whether stolen crypto can be traced. In most cases, it can. Every transaction