Date and Time First Identified
- March 5, 2025 at approximately 1:45pm
Phishing Method
- Email claiming that the recipient has made a purchase at Walmart.
- The message resembles an automated system such as fax or voicemail notification with malicious content, a common method of email attack.
- The email subject contains language commonly found in Gift Card Fraud attacks.
- Email has a sign off that is impersonating the Paypal brand.
- Email appears to be a financial request, but the message body contains language that may be trying to steal money from your organization.
- Email creates a sense of urgency, instructing recipient to call immediately if they don't recognize the seller.
- Several links are included in the email that could be potentially harmful.
User Response
- Do not reply to the message or call any of the included phone numbers
- Do not click on any links or attachments
- Mark the message as spam or junk
- Forward the message to phishing@dartmouth.edu
- Block the sender
Sample Unformatted Email
Subject: Walmart Inc:-Don't recognize the seller ? Quickly let us know at +1(888) 657-1856 (Toll Free). If you don't contact us, this will be approved.: ₱689.90 PHP
Track your purchase from this email.
|
You paid ₱689.90 PHP to Walmart Inc:-Don't recognize the seller ? Quickly let us know at +1(888) 657-1856 (Toll Free). If you don't contact us, this will be approved.
|
Transaction ID
00N46517890216546 |
Transaction date
March 5, 2025 |
Merchant
Walmart Inc:-Don't recognize the seller ? Quickly let us know at +1(888) 657-1856 (Toll Free). If you don't contact us, this will be approved. |
Shipping address
Jeremiah Morgan
PO Box 272
Moss Beach, CA 94038-0272
United States
|
|
|
Blue Gift Walmart Gift Card
Qty: 1 |
₱689.90 |
|
Subtotal |
₱689.90 |
Total |
₱689.90 PHP |
|
Paid Walmart Inc:-Don't recognize the seller ? Quickly let us know at +1(888) 657-1856 (Toll Free). If you don't contact us, this will be approved. with |
Visa-(Redacted)
|
₱689.90 PHP
|
|
This charge will appear on your credit card statement as "PAYPAL *WALMARTINCD".
|
|
Transaction ID: 00N46517890216546 |
View payment status |
|
|
Get a $50 cash back bonus on your first purchase for a limited time |
Earn 3% cash back with PayPal Cashback Mastercard® on all PayPal purchases. |
|
|
|
Apply Now |
Subject to credit approval
|
|
|
|
|
Your payment was sent from (email redacted)
|
|
Help & Contact | Security | Apps |
|
|
PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing
|
Please don't reply to this email. To get in touch with us, click Help & Contact
|
PayPal Customer Service can be reached at 888-221-1161.
|
Not sure why you received this email? Learn more
|
Copyright © 1999-2025 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
PayPal RT001736:en_US(en-US):1.9.0:f427345c91d0f
|
|
|