New Scam Emails Fake Online Order Confirmations To Shoppers

November 28, 2014
By

Walmart, Target, and Costco Among Major Retailers Affected

Shoppers’ email inboxes have just started being flooded with a timely and potentially dangerous scam. Cybercrooks are sending out authentic-looking order confirmation emails that appear to be from Walmart, Target, and Costco, among others, to lure unsuspecting shoppers to their fake websites, according to ConsumerWorld.org.

Upon clicking the link for more information about their supposed order, consumers are taken to a foreign website where a malware-infested .zip file is automatically downloaded to their computer.

“This is the perfect crime at the perfect time,” commented Consumer World founder Edgar Dworsky. “Shoppers are busy placing orders between Black Friday and Cyber Monday, so they would naturally expect to find these confirmations in their inbox. And even if they didn’t place an order with the particular retailer, they may believe that a mistake may have taken place and want to see the details.”

The subject line of the suspect emails typically says “Thank you for buying from (retailer name).”

Consumers who click the link in these emails are taken to various foreign websites hosted at these domains: alchem-asia.com (Walmart email), test.vcalink.be (Target email), and bwanatembosafaricamp.com (Costco email).

Consumer World recommends that shoppers hover their mouse over any link in a purchase confirmation email and note the exact website they will be taken to before they actually click it. The website address should be displayed either in a bubble above the link or in the status line of the email program.

Here are sample purchase confirmation emails that are made to appear to be from Target and Costco, claiming that the customer’s order is ready for pickup:
Consumer World®, launched in 1995, is a public service, non-commercial consumer resource guide with over 2000 links to everything “consumer” on the Internet. Edgar Dworsky, an avid bargain hunter, is the founder of Consumer World, editor of MousePrint.org – an educational site devoted to exposing the fine print loopholes in advertising, and a former Assistant Attorney General in the Consumer Protection Division of the Massachusetts Attorney General’s Office.

Similar Posts:

Share

29 Responses to New Scam Emails Fake Online Order Confirmations To Shoppers

  1. Patricia L. Harlow on November 30, 2014 at 1:17 pm

    My “online order email” arrived on the 26th of November from Costco and read:
    “Our online store Costco.com received an order and the personal data of the recipient coincide with yours. Your may get your order in the nearest Local Store.
    Attention! Your order can be reserved within 4 days. You may see order details here. (The word “here” was underlined and in blue.)
    Happy Thanksgiving Day!
    (signed) Truly yours, Costco.Com (WHAT company in the US has a complimentary close like that?)
    ANYWAY, I HAD NOT ORDERED FROM COSTCO, AND THERE WERE JUST TOO MANY WEIRD WORDINGS HERE. I’M OLD BUT NOT DUMB.

    • Karen on December 3, 2014 at 8:12 pm

      I got the same exact email and almost clicked it but I didn’t recall actually ordering from them so I Googled. Sure enough…

    • Bill on January 7, 2015 at 6:27 pm

      I too received this very email. I noted the Logo Costco in red was not their typical COSTCO Caps logo. I called Costco and they said they have had an increase in calls re this scam.

    • Jan on January 8, 2015 at 7:37 am

      I got the exact same email. Not being a dummy either, I didn’t open the links inside.

  2. Melquiades Mendoza on December 2, 2014 at 11:50 pm

    I clicked on the link, then stopped the progress. I got a notice from my credit card stating $30 has been suspiciously charged.

    • Evie Lynch on December 4, 2014 at 10:13 am

      I clicked on the link, not thinking straight this morning, and got “no access” and then quickly got out of that site and shut off my computer. Has my info been stolen?

  3. Laura on December 3, 2014 at 5:16 pm

    I’ve recently received 2 emails from Best Buy saying I need to confirm my online order in 4 days. To do that, I need to click on a link. This scam is especially tricky, especially if you’ve just ordered some things online.

    • Lisa on December 5, 2014 at 3:39 pm

      I just got this same email but I know I didn’t order anything from best buy.

    • Amy H on December 10, 2014 at 4:55 pm

      I just got this same email. There was a zip file attached to it that it wanted me to open for the ‘order details’. Glad I checked here first.

    • A.G. on December 12, 2014 at 2:57 am

      Got the same email from “bestbuy” today. Although I recently ordered from them this email looked different (fishy) Didn’t fall for it. Beware scams are all over

      • Des on December 18, 2014 at 10:17 am

        I got the same email. I am surprise norton antivirus didn’t detect anything but I open the file and saw the BestBuy.exe and thought this isn’t right. Don’t open any exe file extension if you aren’t sure about it. I am glad I check here.

  4. john on December 4, 2014 at 7:48 pm

    I just recieved a comformation from costco for something I never ordered.The letter had a red flag in the first sentance.It said they recieved an order and the personal data from the recipient coincided with my personal info andcould be reserved within 4 days.Also said click here to see order details.When I clicked there Page Can Not Be Displayed came up

  5. FM on December 6, 2014 at 10:55 am

    Does anyone know how to determine if the Virus was transfer to my hard drive? I ran my Bit Defender Anti Virus Scan, which found nothing. Yet I want to be sure. And in case the Virus is on my hard drive and MS Outlook, how do I get rid of it?

  6. Annie on December 6, 2014 at 12:41 pm

    I got these from Amazon, Best Buy, Costco, Walmart and some others. I know my computer has a key logger now. How do I fix this?

  7. Richard Klein MD on December 7, 2014 at 9:34 am

    Received email saying I had ordered online soon after signing on for new card at Costco store.I could not open “details” due to lack of Windows compatability on my Mac.Any worries?

  8. Carrie on December 9, 2014 at 1:03 pm

    Does anyone know how it will harm a phone? Cannot believe I was stupid enough to click on the link … was checking email on my phone.

  9. Diane Osier on December 9, 2014 at 2:24 pm

    TARGET

    As Thanksgiving nears we want to advise you that our online shop has an order addressed to you. You may pick it in any store of Target.com closest to you within four days.

    Please, open the link for full order information.

    Always yours,
    Target.com
    privacy policy | cookies | terms & conditions | CA privacy rights | CA transparency in supply chains act | about this site
    © 2014 Target Brands, Inc. Target, the Bullseye Design and Bullseye Dog are trademarks of Target Brands, Inc. All rights reserved.

    • dave on December 18, 2014 at 2:07 pm

      I got this same target one… I noticed how the target logo wasn’t quite right. If you click the link it wants you to download a zip file, sure glad I didn’t…

  10. Joe Gibson on December 25, 2014 at 7:07 am

    The messages I get are tailored from Best Buy. The wording is as follows

    “Acknowledgement of Order
    (Insert random date and time received)
    But for me this came at 12/18/2014 at 9:49AM.

    E-shop Best Buy has received an order addressed to you which has to be confirmed by the recipient within 4 days. Upon confirmation you my pick it up in any nearest store of Best Buy.

    Detailed order information is attached to teh letter.

    Wishing you Happy Thanksgiving!

    Best Buy”

    Check the incoming address as we all know when an Online order from Best Buy comes in email: it would have the Best Buy logo and come from Best Buy’s address. These pricks tried…four times and failed miserably as I knew immediately to look at the address and compare it to legit Best Buy emails. And these come in on my iPhone.

  11. John on January 6, 2015 at 5:26 am

    Here’s the exact email, having received so many of these I can recognize them right away. and the links at the bottom of the page for customer service and such don’t work. Here’s the email, (I love the part about Thanksgiving in January):

    As Thanksgiving nears we want to advise you that our online shop has an order addressed to you. You may pick it in any store of Target.com closest to you within four days.

    Please, open the link for full order information.

    Always yours,
    Target.com

  12. Kevin Bahr on January 9, 2015 at 6:09 am

    Fort those that have actually clicked on it to go to link. Have you not paid attention to numerous warnings about hackers?, There is no way that anyone even remotely familiar with technology to be had be those indivduals. A suggestion is to never click on any of those links and to contact the company directly by phone if you have a question about the emaail

  13. wendy on December 2, 2015 at 4:35 pm

    Can this one be verified as a scam? it had an attachment to it and I’m not a Costco member
    Dear Costco Traveler:
    Thank you for reserving your car rental with Costco Travel.

    The included itinerary will serve as your official confirmation. It is recommended that you print this confirmation and carry it with you when you pick up your rental car.

    Should you wish to make a change to your reservation online, you are advised to book a new reservation with the updated information and then cancel your original reservation.

    Need help? Call Costco Travel toll free at 1-877-849-2730.

    Monday through Friday 5 a.m. – 9 p.m.
    Saturday and Sunday 6 a.m. – 5:30 p.m.
    Pacific Time

    Please do not reply to this message. Replies are directed to an unmonitored mailbox.

  14. Cheryl on December 4, 2015 at 1:05 pm

    12/4/2015, I have gotten 11 emails claiming my order has been shipped but never ordered anything for cyber Friday or Monday or the past 3 weeks. Unfortunately opened 2 but didn’t send me to another website but still may be infected. Is this a newer Scam?

  15. Cheryl on December 4, 2015 at 1:08 pm

    Pushed this by mistake. Would want a reply from anyone who has had the same experience.

  16. Colleen on September 27, 2016 at 8:48 am

    Received this one today.

    Customer ID: HDGF-4453-DES
    Account Number: 27450924
    Dear Customer,

    Thank you for shopping with us.
    We are happy to inform you that your order (Sales Order Number: 20849232) has been successfully charged to your credit card and order verification is now complete.

    If you have any questions, please use our Chat function or visit our Contact Us Page.

    Thank you,
    Your Customer Service Team

  17. Nicky on September 28, 2016 at 11:53 am

    I have just received a text message from 87767 stating “Thank you for your order with Dish. Please schedule your installation now at 855-565-5925 (underlined and in blue) Text STOP to unsubscribe. Msg&Data Rates May Apply.

    Odd thing is…I haven’t ordered anything from any dish place. Not sure if it’s spam or someone is trying to use my number to order dish. Called the number from a landline phone but it just keeps being busy. Anyone seen this one?

    • Sam on September 28, 2016 at 8:22 pm

      me too. same thing, haven’t found any info.

    • Heidi Hart on September 28, 2016 at 9:23 pm

      I also received the same text message this morning from 87767 stating “Thank you for your order with Dish. Please schedule your installation now at 855-565-5925 but I also just continuously get a busy signal other than one time it rang then immediately went to a busy signal again. I’m confused as well because I can’t see how anyone would be able to steal our information in this way?

  18. Jon on December 11, 2016 at 1:17 pm

    12-11-16 got e-mail from nitronos stating they billed me monthly for a one time trial offer – just pay S&H. trying to contact to see how much was billed to me and cancel all further orders could be a scram trying to find out !

Leave a Reply

Your email address will not be published. Required fields are marked *





c-hit logo