Listen to the episode
TLDR
Fake Walmart sites lure shoppers with 40 to 70 percent off liquor and electronics, then harvest full credit card details at checkout. A network of over 120 lookalike domains shares the same WordPress/WooCommerce template, swapped business...
How it works
Fake Walmart sites lure shoppers with 40 to 70 percent off liquor and electronics, then harvest full credit card details at checkout. A network of over 120 lookalike domains shares the same WordPress/WooCommerce template, swapped business...
Red flags
- Discounts of 40 to 70 percent on premium alcohol or electronics, far below Walmart's normal prices Walmart logo and layout hosted on an unfamiliar .shop or off brand domain Fabricated US business addresses and phone numbers that change per site
What to do
- 1Verify the URL before typing any card details
- 2legitimate Walmart pages stay on walmart.com If you already submitted card data, contact your issuer immediately to cancel and replace the card Report the domain through your browser's phishing tool and to reportfraud.ftc.gov
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/scams/2026/07/we-found-120-fake-walmart-stores-trying-to-steal-your-credit-cardFAQ
Is 120 Fake Walmart Stores Stealing Credit Card Details Online a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Discounts of 40 to 70 percent on premium alcohol or electronics, far below Walmart's normal prices Walmart logo and layout hosted on an unfamiliar .shop or off brand domain Fabricated US business addresses and phone numbers that change per site
What should I do first?
Verify the URL before typing any card details; legitimate Walmart pages stay on walmart.com If you already submitted card data, contact your issuer immediately to cancel and replace the card Report the domain through your browser's phishing tool and to reportfraud.ftc.gov
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.