A New Scam Tactic Made Me Do a Double Take: “Walmart Order password88458”
When I thought my inbox scammers had settled into a comfortable routine of fake PayPal charges, Geek Squad subscriptions, and invitations to give away hundreds of dollars, somebody apparently decided the script needed an update.
This one actually made me do a double take.
The subject line reads:
“Walmart Order password88458”
Password?
Wait.
Did I ask for my Walmart password to be reset?
No.
And that tiny moment of uncertainty is exactly what caught my attention.
This One Feels Different
Most of the scam emails I've been receiving practically announce themselves.
YOU SPENT $499.99!
YOUR GEEK SQUAD SUBSCRIPTION RENEWED!
CALL THIS NUMBER IMMEDIATELY!
They want panic.
This one is quieter.
The email body has no real message. Instead, it has two attachments: an HTML file and what looks like an invoice.
The sender shown is:
Yet the subject references Walmart.
That's enough for me to stop.
If this is supposedly about my Walmart account, why is the message coming from a completely unrelated domain?
And why would I need to open attachments to figure out what's happening with my password?
No thanks.
The “Password” Word Almost Worked
That's what I find interesting about this one.
I saw “password” and instinctively wondered whether I'd requested a password reset.
For a moment, the message made me question my own memory.
That's potentially much more effective than another ridiculous $499.99 invoice.
People reset passwords all the time. Sometimes we forget that we requested one. Sometimes an app logs us out. Sometimes we get legitimate security alerts when someone attempts to access an account.
So seeing Walmart + Order + Password mashed together in a subject line can create just enough confusion to make someone investigate.
And investigating might mean opening one of those attachments.
That's where I stop.
Two Attachments? I'm Good.
One attachment ends in .htm.
That's an HTML file—a webpage packaged as a file.
Opening an unexpected HTML attachment can potentially take someone into a fake login or other deceptive content designed to look legitimate. I'm not opening it to find out what this particular one does.
The second attachment appears to be an invoice.
I'm not opening that one either, thank you.
If Walmart needs me to take action on my account, I don't need an attachment from solodax.com to proceed.
I can independently open the Walmart app or type the legitimate Walmart website into my browser and check my account there.
The suspicious email doesn't give me a roadmap for how to investigate it.
This Is Why I Keep Sharing These
Scams don't always look like:
“HELLO DEAR SIR, YOU HAVE WON $47 MILLION.”
Sometimes they're messy.
Sometimes they're polished.
Sometimes they use familiar company names.
And sometimes all they need is one word—like password—to make me stop and wonder:
“Wait...did I do something?”
I did the double take.
Then I looked at the sender.
Then I looked at the attachments.
And I remembered:
I didn't request a password reset.
Mystery solved.
No attachments opened.
No links clicked.
No passwords entered.
And, for once, Bill apparently had the day off.
Send Me Your Scam Attempts
I'm still documenting the different tactics that land in my inbox because seeing real examples can make the next suspicious message easier to recognize.
If you've received an unusual scam email, phishing attempt, fake invoice, suspicious password-reset message, or another creative attempt to get your information, send me a screenshot and your experience:
First, remove or cover any sensitive personal, financial, or account information.
The scammers changed tactics.
So I'll keep paying attention.
If I didn't request a password reset, I won’t open an attachment to understand why someone believes I did.
Bill Is Back—Twice: Apparently My Fake PayPal Account Had a Busy Morning
At this point, I think Bill needs an intervention.
If you've been following my continuing adventures with scam emails, you may remember Bill. Bill is the mysterious person who keeps appearing in these fake invoices and event invitations, supposedly using my PayPal account to buy things I never ordered.
Well, Bill is back.
And this time, he brought friends.
On October 1, I received two more suspicious event invitations. They arrived just one minute apart.
The first came from Ramadhan Riyanto at 9:52 a.m.
The second came from Anne Gomez at 9:53 a.m.
Apparently, scammers believe in efficiency.
First Invitation: $499.99
Ramadhan invited me to:
“Your Order confirmed: INV#445016. Amount:$499.99”
How thoughtful.
According to the invitation, Bill supposedly paid $499.99 for a subscription using my “Pay_Pal” account.
Yes, Pay_Pal.
Maybe PayPal's lesser-known cousin.
And, naturally, if I didn't recognize the purchase, there was a convenient telephone number for the “Resolution Center.”
Convenient for whom is another question.
The invitation even gave me the familiar choices:
Going. Maybe. Can't Go.
I'm going with Can't Go.
I have a scheduling conflict.
I'm busy not losing $499.99.
One Minute Later: Another Party!
Apparently, declining one imaginary purchase wasn't enough.
At 9:53 a.m.—just one minute later—Anne Gomez invited me to another event:
“Geek Squad Order confirmed: INV#445027. Amount:$399.99”
And guess who made the purchase?
BILL!
Bill allegedly spent another $399.99 using my imaginary Pay_Pal account.
So within one minute, Bill supposedly racked up $899.98 in fake charges.
Bill, buddy...
We need to talk about your spending habits.
The Similarities Are Almost Comical
Put these two messages side by side, and the pattern is hard to miss.
Different sender.
Different invoice number.
Different dollar amount.
Different supposed Resolution Center phone number.
But almost everything else follows the same formula.
Both arrived as event invitations.
Both claim Bill used my PayPal account.
Both mention an “unknown seller IP.”
Both provide a telephone number to dispute the transaction.
Both create a sense of urgency around a purchase I supposedly didn't make.
And both contain a warning right there in the email:
“This event invitation was not sent by Meta. Please be cautious when clicking on links or providing personal information.”
At this point, the warning may as well be flashing in neon.
Yesterday It Was Geek Squad. Today It's a Doubleheader.
What makes this even funnier is that these arrived right after another fake Geek Squad invitation I recently wrote about.
That one claimed Bill spent $399.99.
Now Bill supposedly spent another $499.99 and $399.99.
My fictional friend is having quite a shopping spree.
If this keeps up, I'll need to stage a fictional financial intervention.
Why Send Two So Close Together?
I obviously can't know who is behind these messages from the emails alone, and I can't say whether the two invitations were generated by the same person or operation.
But the nearly identical wording and timing are worth noticing.
That's part of why I keep documenting these messages.
One strange email might make someone stop and wonder whether there's really a problem with an account.
When several nearly identical versions appear, the formula becomes much easier to see.
The company name can change.
The amount can change.
The sender can change.
The telephone number can change.
But the basic objective appears to remain the same:
Get me worried enough to respond before I stop and think.
I'm Still Not Calling
If I received a legitimate-looking notice about a PayPal, Geek Squad, bank or credit-card transaction I didn't recognize, I wouldn't use the telephone number supplied in a suspicious email.
I'd go directly to the company's official app or website and check my account independently.
The email doesn't tell me how to verify it.
That's an important distinction.
And I'm definitely not calling a mystery “Resolution Center” because Bill supposedly went shopping again.
Going? Maybe? Can't Go?
I still love that these arrive as event invitations.
Imagine putting these on my calendar:
9:00 a.m. — Lose $399.99
10:00 p.m. — Lose another $499.99
Dress code: Business casual.
Refreshments: None.
Financial regret: Complimentary.
RSVP?
Can't Go.
Keep Sending Me Your Scam Stories
I'll keep documenting these because the more examples we see, the easier it becomes to recognize the patterns.
If you've received a suspicious invoice, fake purchase notification, Facebook event scam, PayPal impersonation, Geek Squad message, or another creative attempt to separate you from your money, send me your story and screenshots at:
Just remove or cover any sensitive personal or financial information before sending it.
As for Bill?
If anyone sees him, please tell him his Pay_Pal privileges have officially been revoked.
Another Scam Invitation: Apparently I’m Invited to Give Away $399.99
My inbox has once again extended a very generous invitation.
This time, Maulana Utomo has invited me to an event called:
“Geek Squad Order confirmed: INV#88452. Amount: $399.99”
How thoughtful.
Some people get invited to weddings.
Some people get invited to birthday parties.
Apparently, I get invited to give scammers money or personal information.
I really need a better social life.
Going, Maybe, or Can’t Go?
This is my favorite part of these fake Facebook event invitations.
According to the message, I supposedly have a $399.99 Geek Squad order.
Naturally, The Facebook gives me three options:
Going
Maybe
Can’t Go
Let me check my calendar...
Nope.
Unfortunately, I'm busy that evening, not giving strangers $399.99.
I'm going with Can’t Go.
Bill Is Back!
Then I read the description, and an old friend has apparently returned.
Bill.
The invitation says:
“Bill has paid $399.99 for a subscription using your Pay_Pal account from an unknown seller IP.”
Bill!
We've talked about this.
In one of my previous mystery-subscription emails, Bill supposedly spent $450 using my PayPal account.
Now he's back for another $399.99.
At this point, Bill has more subscriptions than I do.
Someone needs to take away his imaginary credit card.
Geek Squad, PayPal and Facebook Walk Into a Scam...
This one throws several recognizable names into the blender.
The event title references Geek Squad.
The description references PayPal—although creatively written as “Pay_Pal.”
The email itself comes from a Facebook event invitation.
And then there's a phone number supposedly belonging to a “Resolution Center.”
That's a lot of recognizable branding packed into one message.
But there's also something else sitting prominently near the top of the email:
“Warning: This event invitation was not sent by Meta. Please be cautious when clicking on links or providing personal information.”
That's probably the most useful sentence in the entire email.
What Exactly Am I Being Invited To?
That's what makes these messages funny to me.
The email literally says:
“Tell them if you can make it.”
Make it to what?
My $399.99 unauthorized transaction?
Is there going to be cake?
Should I bring a gift?
Do I need to RSVP?
Because from where I'm sitting, this looks like an invitation to worry about a fake charge, call the number provided, and potentially hand over money, account information, personal information—or some combination of the three.
That's one party I'm happy to miss.
The Urgency Is the Point
The $399.99 isn't there because someone necessarily charged me $399.99.
It's there to get my attention.
The recognizable company names get my attention.
The “unknown seller” creates concern.
The telephone number gives me an immediate action to take.
Put everything together, and the hope seems pretty obvious:
React first. Investigate later.
I'm doing the opposite.
If I ever receive a suspicious message claiming I've been charged by a company, I can check the account independently through the company's legitimate app or website rather than using the contact information in the suspicious message.
I don't need Bill's help.
Thanks for the Invitation
So, Maulana, thank you for thinking of me.
Unfortunately, I must respectfully decline your invitation to potentially hand over $399.99 and my personal information.
I already have plans.
I'm going to hit Delete.
And Bill?
Please stop shopping.
Have a Scam Story? Send It My Way
These messages keep coming, and I'll keep documenting them.
If you've received a strange scam email, fake invoice, suspicious Facebook invitation, mystery purchase, phishing text, or another creative attempt to get your money or information, send it to:
Send a screenshot and tell me what happened. Be sure to remove or cover any sensitive personal or financial information first.
Maybe your scammer can meet Bill.
They apparently have similar interests.
The Scam Emails Are Getting Lazy: “Thanks for Your Order”… What Order?
Apparently, my imaginary shopping spree continues.
After Bitcoin purchases, mystery subscriptions, Geek Squad renewals, Facebook event invitations, and even a watch repair I never requested, the scammers have apparently decided they were working too hard.
Why bother creating an elaborate fake invoice when you can simply send:
“Thank You for Your Order.”
What order?
Excellent question.
Two Days, Two Mystery Orders
Yesterday, I received an email from “Manthan Williams” with the subject:
“Re: Thank You for Your Order 1KJBO6SYBRM6TJBQLEDV”
There was an attachment.
And almost nothing else.
Today, “Elizabeth Lewis” joined the party with:
“Thank You for Your Order 0RQKQA6198JOMD57P”
Another random order number.
Another attachment.
Another email with practically no explanation.
Apparently, customer service has embraced minimalism.
At Least Tell Me What I Bought
This is what makes these emails almost funny.
No recognizable retailer.
No product description.
No price prominently displayed.
No useful explanation of what I supposedly ordered.
Just:
Thank you for your order. Here's an attachment.
Oh, sure. Let me immediately open a mystery attachment from a random Gmail account to discover what I supposedly purchased.
What could possibly go wrong?
I'm not opening it.
That's an important point. I don't need to open an unsolicited attachment to investigate a purchase I don't recognize.
If I actually ordered something, I can check the retailer or payment account independently.
The Random Gmail Addresses Aren't Helping
One email claims to be from Elizabeth Lewis but arrives from a seemingly unrelated Gmail address.
The other claims to be from Manthan Williams and also comes from an unrelated Gmail address.
Could legitimate people use Gmail?
Of course.
But when an unexpected “order” email arrives from a random Gmail account, provides virtually no information, and wants me to open an attachment to learn more, my curiosity isn't winning this battle.
Delete beats double-click.
The Attachment Is the Bait
These messages use a slightly different approach than the fake PayPal and Facebook invitation scams I've been documenting.
Those messages tried to scare me with a large dollar amount and get me to call a telephone number.
These appear designed to create curiosity:
What did I order?
How much did they charge me?
Did somebody use my credit card?
What's in that attachment?
And that's exactly why I'm leaving the attachment alone.
Fear can make people click.
But so can curiosity.
My Imaginary Self Has Quite the Lifestyle
According to my inbox, imaginary Niel has been busy.
Bitcoin.
Geek Squad.
Mystery subscriptions.
Watch repairs.
More mystery subscriptions.
And now two mystery orders in two days.
The only thing missing is knowing what I actually bought.
Come on, scammers.
If you're going to invent purchases for me, at least make them interesting.
Tell me I bought a Ferrari.
A beachfront condo.
A private jet.
Maybe a lifetime supply of Coke Zero.
Give me something worth accidentally ordering.
Instead, I get:
ORDER 0RQKQA6198JOMD57P.
I'm underwhelmed.
Have a Scam Email? Send It to Me
I'm still collecting these because the tactics keep changing, even though the objective remains the same: get us to react before we stop and think.
If you've received a suspicious email, fake invoice, mystery order, phishing text, social media scam, or another creative attempt to separate you from your money, send it my way:
Tell me what happened and send a screenshot if you have one. Please remove or cover sensitive personal or financial information before sending anything.
Maybe I'll feature it in a future post.
Until then, Elizabeth and Manthan:
Thanks for thanking me for my orders.
Whatever they are.
They’re Back! Apparently I Paid $450 for Another Mystery Subscription
It’s been a little while, but apparently my scam social calendar is back in action.
For those who haven’t been following along, I’ve received some interesting emails over the past few months. According to my inbox, I’ve bought Bitcoin, renewed Geek Squad protection—more than once—and even had a watch repaired that I never sent anywhere.
Today, we return to an old favorite:
The Facebook Event Invitation Scam.
This time, “Brooke Alexandra” has invited me to an exciting event called:
“Your Subscription Payment of $450 was Paid. Your Order ID#663028”
Well, Brooke, thank you for the invitation.
Unfortunately, I have absolutely no idea what I supposedly subscribed to.
Going, Maybe, or Can’t Go?
My favorite part of these scams is still Facebook’s event format.
I’ve supposedly just discovered an unauthorized $450 PayPal transaction, and immediately underneath this alarming news, I’m asked:
Tell them if you can make it.
My choices?
Going.
Maybe.
Can’t Go.
Decisions, decisions.
I’m going with Can’t Go.
Not because I have another commitment. I try not to attend celebrations for fraudulent purchases.
Meet Bill, My Apparently Very Generous Alter Ego
The description gets even better.
It says:
“Bill has paid $450 for a subscription using your Pay_Pal account from an unknown seller IP.”
Who is Bill?
I have no idea.
Bill, please stop spending my imaginary money.
The message then provides a phone number and tells me to call if I don’t recognize the seller.
And then comes my favorite instruction:
“Please do not copy the number, type it manually to call.”
Oh, absolutely.
I'm not comfortable trusting a financial alert that asks me to type a phone number manually.
That’s practically the international symbol for:
“Nothing suspicious happening here!”
Meta Is Literally Warning Me
As with the previous versions, there’s an important message sitting prominently near the top:
“Warning: This event invitation was not sent by Meta. Please be cautious when clicking on links or providing personal information.”
That deserves more attention than the scary $450 headline.
The formula hasn’t changed much:
Create an alarming transaction.
Use a recognizable brand name like PayPal.
Please let me know if my account may have been compromised.
Give me a telephone number.
Please create urgency so I call before I stop to think.
And package everything inside a Facebook event invitation so the resulting notification looks more familiar.
The Scam Has One Big Problem
If my PayPal account really has a mysterious $450 transaction, I don’t need Brooke Alexandra—or Bill—to help me investigate it.
I can go directly to PayPal through its official app or website and check my account.
The same rule applies to suspicious emails claiming to come from a bank, credit card company, retailer, Geek Squad, or practically anyone else.
Don’t let the suspicious message tell you how to verify the suspicious message.
Verify it independently.
And don’t call a mystery number just because someone put “PayPal” next to it.
My Imaginary Spending Spree Continues
So let’s add another purchase to the growing list.
Bitcoin? ✔️
Mystery subscriptions? ✔️
Geek Squad? ✔️
Watch repair? ✔️
Another mystery $450 subscription? ✔️
At this point, the person living inside my spam folder has a considerably more exciting financial life than I do.
I’m just disappointed that after all this imaginary spending, nobody has emailed me to say I’ve purchased a beachfront condo in Thailand.
Scammers, if you’re reading this, at least make the next fake purchase interesting.
Have a Scam Story? Send It My Way
Now I want to hear what’s landing in your inbox.
If you’ve received a scam email, suspicious text, social media message, fake invoice, questionable refund notice, or something that made you think, “There is no way this is legitimate,” send it to me.
Please send me your screenshots and let me know what happened. I may feature some of them in future posts as we look at the creative—and sometimes hilariously bad—ways scammers try to separate people from their money.
Please remove or cover passwords, account numbers, addresses, phone numbers, or other sensitive personal information before sending screenshots.
Maybe it’s time to turn my scam collection into our scam collection.
And until then, Brooke...
Can’t Go.