Debunking hoaxes and exposing scams since 2003!

Hoax-Slayer Logo

PHISHING SCAM - 'Unclaimed Walmart Vouchers' Notification Email


Outline

Email claims that the 'Walmart Reward Server' has identified the recipient's email address as being linked to $500 worth of unclaimed Walmart vouchers.

Facebook phising
© Depositphotos.com/ alexskopje

Brief Analysis

The email is not from Walmart and the recipient has not been rewarded with any vouchers. The message is a phishing scam designed to trick users into giving sensitive personal information to online criminals. Do not click any links in these fraudulent emails.

Example

Subject: Your Walmart Voucher


Dear Customer,

Our Walmart reward server has identified this email [removed] to have
500 dollars worth of unclaimed walmart vouchers.

It has been difficult to send this vouchers to you because you have not confirmed your records correctly on our server.

Please,carefully follow the link below and fill in all fields correctly to have your vouchers posted to your mailbox.
[Link removed]

Thank you for chosing Walmart.

Tesco Personal Finance

Unclaimed Walmart Vouchers Phishing


Detailed Analysis

According to this message, the recipient has accumulated $500 worth of Walmart vouchers that have not yet been claimed. Supposedly, the vouchers were not sent because the recipient has not confirmed account details. The message asks people to follow a link and supply their personal information so that the vouchers can be mailed out. Inexplicably, the message signs off as being from 'Tesco Personal Finance'.

But, in fact, the email is not from Walmart (or Tesco) and the promised vouchers do not exist. Those who click the link to claim the promised vouchers will be taken to a bogus web form that asks for their name and address details, social security number, phone number and email address. After supplying this information and pressing the 'Submit' button, they will be informed that the update process is complete and that the vouchers will be mailed to them in the coming days.

Alas, the vouchers will never come. And the criminals have already started accumulating personal information that may subsequently lead to identity theft and financial fraud.

The scammers now know a very valuable fact about their victims. They know that those who submitted their details are vulnerable to such ruses and are willing to comply. Thus, victims may well be directly targeted in further scams. They may receive 'follow up' emails that ask for more personal details and financial information such as credit card numbers. Because the scammers now have the names and other personal data belonging to their victims, they can perpetrate personalized and specifically targeted phishing attacks that may appear quite legitimate.

Using information stolen via follow up scam emails, the criminals may be able to hijack accounts belonging to their victims, perform fraudulent credit card transactions and commit identity theft.

The promise of unclaimed vouchers is a common scammer ruse. Be wary of any message that suggests that you can claim unexpected vouchers or gift cards by clicking a link or opening an attached file and supplying personal information.



Last updated: May 1, 2014
First published: May 1, 2014
Written by Brett M. Christensen
About Hoax-Slayer

References
'Unclaimed Tesco Voucher' Phishing Scam