The checker reads one suspicious email. Batmail reads your whole inbox overnight.
Paste the Walmart email into the checker and it reads it for the signs below.
The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.
Batmail phishing email checker
A fake Walmart email says you won a gift card, then asks for your Social Security number.
Walmart’s fraud alerts page describes phishing emails that may look just like a real Walmart email, including the logo, so the look of a message proves nothing. It lists other signs instead. The email below is invented, and each number is one of them.
Example
Dear customer,
Congratulations, you won our customer appreciation draw: a $750 Walmart gift card.
To claim your prize, send your full name, address and Social Security number.
Reply within 24 hours, or the prize goes to the next winner.
The button says walmart.com/rewards
The sender's address is not Walmart's.
Walmart warns about fake sender addresses that appear to be "Wal-Mart" or an address such as admin@walmart.com, and says there is usually another email address embedded in the "from" line.
A prize for a contest you never entered.
Walmart says you can't win a contest you didn't enter, and that it doesn't notify winners of any contest by text message.
A request for a Social Security number.
Walmart says legitimate companies will not expect you to provide your Social Security number or other personal information.
A button that says walmart.com and goes somewhere else.
Walmart says a fake website tends to lack Walmart branding, its Privacy Notice and the look and feel of its other sites.
From Walmart: Fraud Alerts, read 7 November 2026.
Read the sender's address from the right, because the last two parts say who owns it.
Anyone can put “Walmart” in front of an address, even a name like admin@walmart.com in front of someone else’s domain. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. Walmart’s fraud alerts page is at corporate.walmart.com, and the owner of that address is walmart.com.
Read the domain from the right
corporate.walmart.com
From WalmartOwned by walmart.com. This is the address of Walmart's own fraud alerts page.
walmart.com.prize-claim.example
Not from WalmartOwned by prize-claim.example. walmart.com is only a label in front of it.
walmart-rewards-desk.example
Not from WalmartOwned by walmart-rewards-desk.example. The name has Walmart in it, but the owner is someone else.
From Walmart: Fraud Alerts, read 7 November 2026.
Walmart lists what it does not do, and a prize email asks for the things on that list.
Walmart’s fraud alerts page gives short rules for the messages, checks and calls that use its name. A fake prize email breaks at least one of them.
| Question | What Walmart says | What a fake Walmart message does |
|---|---|---|
| Does Walmart tell contest winners by text? | What Walmart says"Walmart doesn't notify winners of any contest via text message," and "you can't win a contest you didn't enter." | What a fake Walmart message doesSays you won a prize you never heard of. |
| Does Walmart mail a check to deposit? | What Walmart says"Walmart will NEVER mail you a check and ask that you deposit it to purchase an item or service." | What a fake Walmart message doesSends a check with instructions to deposit it and buy something. |
| Does Walmart ask for payment in gift cards? | What Walmart saysWalmart says you will never be asked to pay your utility bills, bail money or bills with Walmart Gift Cards. | What a fake Walmart message doesAsks for a fee to be paid with gift cards. |
| Does Walmart ask for your Social Security number? | What Walmart says"Legitimate companies will not expect you to provide your social security number or other personal information." | What a fake Walmart message doesNeeds it to "claim" the prize. |
From Walmart: Fraud Alerts, read 7 November 2026.
Walmart wants a fake email sent to OnlineAbuse@walmart.com as an attachment.
Walmart asks for the email itself, kept whole. It says not to cut and paste the email into the body of a message or to forward it, and that it needs the attachment for investigatory purposes. For a phone call that says it is from Walmart, the page says callers ask you to verify the information on file, and that fraudsters can manipulate caller ID to show a legitimate business’s name. It says not to give any information, and to call a trusted number for the company instead.
How Walmart says to report a fake email
- Keep it whole
No pasting, no forwarding.
Walmart says not to cut and paste the email into the body of a message, or forward it.
- Attach it
OnlineAbuse@walmart.com.
Walmart says to send the email directly to this address as an attachment.
- The reason
For investigatory purposes.
That is why Walmart says it needs the email in this form.
From Walmart: Fraud Alerts, read 7 November 2026.
Five steps tell you whether a Walmart email is real without clicking anything.
- Leave the button and every link alone, and give no information. Walmart says legitimate companies will not expect your Social Security number or other personal information.
- Read the sender’s address from the right, as in the picture above. Walmart says to look for another address embedded in the “from” line, or many recipients in the “to” line.
- If a caller says they are from Walmart, give no information. Walmart says to call a trusted number for the company, and not the number the caller or a suspicious email gave you.
- Paste the email into the checker at the top of this page for a second read.
- Send the email as an attachment to
OnlineAbuse@walmart.com, as Walmart says. In Gmail you can also choose More next to Reply, then Report phishing.
Steps from Walmart: Fraud Alerts, read 7 November 2026.
Steps from Gmail Help: Avoid & report phishing emails, read 7 November 2026.
If you were scammed, Walmart says to file a police report and report it to the FTC.
Walmart says that if you were scammed, you should file a report with your local law enforcement agency and report it to the Federal Trade Commission. For cyber scams it points to the Internet Crime Complaint Center. For a Walmart gift card scam, it gives a number to report to: (888) 537-5503. For a link or file you opened, the FTC says to update your computer’s security software and run a scan.
What to do depends on what you did
You only read it.
Send it as an attachment to OnlineAbuse@walmart.com.
You clicked a link or opened an attachment.
Give no information. Update your computer's security software, run a scan and remove anything it identifies as a problem.
You gave personal details, or paid with gift cards.
File a report with local law enforcement and report it to the FTC. Report a Walmart gift card scam to (888) 537-5503. Follow the steps at IdentityTheft.gov for what you shared.
From Walmart: Fraud Alerts, read 7 November 2026.
From FTC Consumer Advice: What To Do if You Were Scammed, read 7 November 2026.
From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 7 November 2026.
The same checks work on other store and government emails.
A prize or refund email can borrow the name of any store or agency. The guide to fake Costco emails covers a failed membership payment, and the guide to fake IRS emails covers a refund that asks for your Social Security number. The holiday scam emails guide puts the kinds side by side.
These are the questions people ask next.
How can I tell a fake Walmart email?
Walmart's fraud alerts page lists these signs: a sender address that appears to be "Wal-Mart" or an address such as admin@walmart.com, another email address embedded in the "from" line, many recipients or "undisclosed recipients" in the "to" line, and a website that lacks Walmart branding and its Privacy Notice. It adds that a phishing email can look just like a real one, logo included.
Where do I report a fake Walmart email?
Walmart says to send the email directly to OnlineAbuse@walmart.com as an attachment. It says not to cut and paste the email into the body of a message or forward it, and that this is needed for investigatory purposes.
Does Walmart tell contest winners by text or email?
Walmart says it does not notify winners of any contest by text message, and that you can't win a contest you didn't enter. It also says it will never mail you a check and ask you to deposit it to purchase an item or service.
Will Walmart ever ask me to pay with gift cards?
Walmart says you will never be asked to pay your utility bills, bail money or bills with Walmart gift cards. It says to report Walmart gift card scams to (888) 537-5503.
What if a caller says they are from Walmart?
Walmart says phone scammers ask you to verify the information on file, and can manipulate caller ID to display a legitimate business's name. It says not to give any information, to call a trusted number for the company, and not to use the number the caller gave you.
What should I do if I was scammed?
Walmart says to file a report with your local law enforcement agency and report it to the Federal Trade Commission. For cyber scams it points to the Internet Crime Complaint Center, and it also lists your state attorney general and the BBB Scam Tracker.
Every step on this page comes from these official pages.
Read on . Spot a step that has changed? Email support@batmail.ai and we will fix it.