Was prompted to confirm all of our info on Wally World last week which I did. Everything looked good and then I got this email tonight which looks real. I opened a case with Walmart to see if it’s real and if we are just supposed to reply to the email because it provides no direction and there’s nothing that I can see on the seller center dashboard that shows a problem.
Any other Wally World seller get this? Spoke to soon in another thread about how easy Walmart is LOL…
I wouldn’t trust that message as far as I could throw it.
Of course, X-Files was one of my favorite shows, and I don’t trust anyone.
For what it’s worth, I was asked to review my business information and this was the ‘from’ email address:
Walmart Marketplace Notifications [email protected]
The email closed with this -
Refer to this article for more information: Seller Business Information Policy
DO NOT REPLY TO THIS EMAIL AS THIS INBOX IS NOT MONITORED
Thank you for being part of our seller community! We appreciate your partnership.
Regards,
Walmart Trust and Safety
That’s very different than the way yours is written.
Red flags to me (the person who trusts no one)
Don’t trust it. The bottom section should be the official Walmart sign off (Note the signature Trust AND Safety, not &)-
This is what I have on the dash which looks normal and good.
I had the same thing when they asked me to ‘Review your business information’. There’s a big blue ‘Confirm your information’ button in the email, but when I click it, it takes me to the Walmart page that looks just like yours, with everything up to date.
I just laughed it off, assuming they sent it to everybody, even sellers who’d just registered recently who probably didn’t need to “re” confirm the information they’d just provided.
but the problem I have is the email. It’s @walmart.com
Is it possible they spoofed the ‘from’ address? I find it highly unlikely (maybe I’ve been an Amazon seller too long) that they’d give you an email address that would let you write directly to a team that might actually be useful to you.
Let’s see what seller support has to say about this…
Do we trust Walmart’s seller support any more than we trust Amazon’s? 
You’ll get it figured out.
But don’t lose sleep.
You don’t get much as it is.
If it helps, the requested verification documents are IRS Form SS4 is an application for an EIN and IRS 147C is the IRS Form letter you get from the IRS confirming your new EIN. Your CPA should be able to call the IRS (you might get charged for 40 minutes to an hour while they are on hold) and get your 147C replacement letter. With the magic of the internet by requesting it online, you can receive it the same day in most instances, rather than the four to six weeks it takes to send it via The United States Postal Service.
The only thing I received was an email to verify that there were no changes that needed to be made. I clicked verify and nothing since then.
Thanks. We are all buttoned up in terms of having all of our documents on hand in hard copy and scan… Just inherent with the business we are in so it translates to everything.
For anyone interested, here’s the link to show whether or not your verification has been verified by Wally World. Ours still shows under review - partner support has not responded to our case as of yet which is odd. They are normally pretty quick although we have only needed them 2 or 3 times in the past and that was just because we were getting setup.
If you view the message source, does it show the email was actually sent from walmart.com? Any email address can be populated in an email’s “reply to” field.
Below is the source header from the email requesting sellers confirm their business info…
Received: from mail.a233.static.mgsend.net (mail.a233.static.mgsend.net [104.130.123.233]) by {XX-SA_FL’s mail server–XX} with SMTP;
Fri, 30 Jun 2023 22:02:31 -0400
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=es.relay.walmart.com;
q=dns/txt; s=mx; t=1688176952; x=1688184152; h=Content-Transfer-Encoding:
Content-Type: Message-Id: To: To: From: From: Subject: Subject: Mime-Version:
Date: Sender: Sender; bh=Ipggm1B5BOaVkFOSpd/YgTFimk9/ouah17VMQXkPu7Q=;
b=EovoaiV9YmdDI57aU9h+UgxYj3B/zfYCgITit7IpGLgjFaluVgocLlx/twLYFdJSd7LRAI3GW5HOUC1tcQf7abXm9Ys6N9ucidwZL0sDV8oVwBiXYQhWNIZo3iEOav3KUV6NE1qyZcmei1gKNETbWnikSEe9QR1lGi+4O4BmNtQ=
X-Mailgun-Sending-Ip: 104.130.123.233
X-Mailgun-Sid: WyIxYjcxNyIsIm1lbGFuaWVAc3Vic2NyaXB0aW9uYWdlbmN5LmNvbSIsImYyMzdiNSJd
Received: from ( ) by 3c11b1d71861 with HTTP id
649f8938040f4543f841e64c; Sat, 01 Jul 2023 02:02:32 GMT
Sender: [email protected]
Date: Sat, 01 Jul 2023 02:02:32 +0000
Mime-Version: 1.0
Subject: [Action Needed] Review your business information
From: Walmart Marketplace Notifications [email protected]
What do you make of this? I have no idea what I am looking at here. LOL Is it legit or not??? THANKS!
Delivered-To: REDACTED BY ME
Received: by 2002:a05:7000:4501:b0:4f3:43c7:f676 with SMTP id d1csp4955185mae;
Thu, 6 Jul 2023 14:37:55 -0700 (PDT)
X-Google-Smtp-Source: APBJJlEDnYwtjc7SPMwPloUMkx22PdolpQEHfr2736YTueT6wc6Vs1IgRG7F6o3pLZgs78SobPrJ
X-Received: by 2002:ac8:5f92:0:b0:400:ab8e:5f6f with SMTP id j18-20020ac85f92000000b00400ab8e5f6fmr8905445qta.4.1688679475503;
Thu, 06 Jul 2023 14:37:55 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1688679475; cv=none;
d=google.com; s=arc-20160816;
b=UqUs4b4GiBygv0sSpwNpxUrhVsRHk6eB7PeMYPfCbm5UgVkmpMwoIL1y0+8+oW+9HM
XUK4UDq1BeFnFTMSl5fVRALy4QgBa9V9bmz/Ok/se2aWJzsIDOeOancqkk2mEhbDjDrQ
3reC6p/a0NGYKDTs0mk/lORjVJ+Tb4WMW9qzWOISfpNGkfwv3ln3Ai7E1ofcT33C6U9z
+NN8ecId2uvjJqzC7oCyBNmCCBo2YMlfTmFV6glEW0gt5A0TnOcwrpqpOSK/if+SZyEe
l9qQYW6dd+1Cc+qw3le2T7VuXwcpMXof3lqfeG8pyWiLY4YHkKaXT80QGnn3lolnkwrS
RigA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:subject:message-id:to:reply-to:from:date
:dkim-signature;
bh=IirI3smWBf8z5QCzQwm8lIX8OkkSu7WNtEU0OMNDiEY=;
fh=wOQUiY0lnzxrokJQdgoFnZRce4iJXWrE1muR7M/9zFc=;
b=ZUrLcO3JzhW0vgEvM/QkblxfMNu74tLMIOcJuN7QYSCkvXtzVKPOPKDpzQib42tPyC
fxRe7nV+rcf5cAah7lHtRQhIh92ugJEszDH6Z5dF2UWFgBrwqGpsVjyHTmDbAfEB327E
qigbIBnWEX3WHnSXr4JzFff20VD37adHmAB9fMKY6akPtQJbz4xxdfG6NSuxjn5haRmD
VFh24iemtcQztj0XxMcKlFtHfkkWEjwK5T5kM5W6POQLxU6njeMTzZ0opHJ5ALtMSIV+
uEs+0GPCcNFhlPS48QKSWWpWmXoa74KEPJdxC3hQJ1PLIBrOkJRelwYM9RUaxrOiflXg
i25A==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=gecrm header.b=TX2MveNx;
spf=pass (google.com: domain of walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com designates 13.110.78.166 as permitted sender) smtp.mailfrom="walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com";
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=walmart.com
Return-Path: walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com
Received: from smtp07-ia5-sp5.mta.salesforce.com (smtp07-ia5-sp5.mta.salesforce.com. [13.110.78.166])
by mx.google.com with ESMTPS id n7-20020ac85b47000000b003f689dc7c26si1587013qtw.332.2023.07.06.14.37.55
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 06 Jul 2023 14:37:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com designates 13.110.78.166 as permitted sender) client-ip=13.110.78.166;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=gecrm header.b=TX2MveNx;
spf=pass (google.com: domain of walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com designates 13.110.78.166 as permitted sender) smtp.mailfrom="walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com";
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=walmart.com
Return-Path: walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=walmart.com; s=gecrm; t=1688679475; bh=aN6UG010kgYLk1gNGd/H/BRHCy1so3DaQNaPiI1JGmA=; h=Date:From:To:Subject:MIME-Version:Content-Type; b=TX2MveNxL2RPJtnphTB0LRGNu/x9FVH7NP42e9O+ARR9RhWh8zyDnSaggZZQSLtPz
sRkNQRki+vAjzmivpBWTnb6gV5MjdF+x5MPab1WaavMAL3fnvsY+pcIvtW84Dq0Yuq
YtVqLGnn88yy78zCtybBEZe+/7jIBJibhejsTfAQ=
Authentication-Results: mx1-ia5-sp5.mta.salesforce.com x-tls.subject=“/C=US/ST=California/L=San Francisco/O=salesforce.com, inc./OU=0:app;1:ia5;2:ia5-sp5;3:na209;4:prod/CN=na209-app2-33-ia5.ops.sfdc.net”; auth=pass (cipher=ECDHE-RSA-AES256-GCM-SHA384)
Received: from [10.183.28.138] ([10.183.28.138:39952] helo=na209-app2-33-ia5.ops.sfdc.net) by mx1-ia5-sp5.mta.salesforce.com (envelope-from walmarttrustsafety=walmart.com__44qq15t56kk1o2ei@r12nyi4wu7gaokb2.h9n4l3c4s07ge4hk.ixjn9.61-zktceao.na209.bnc.salesforce.com) (ecelerity 4.4.0.19839 r(msys-ecelerity:tags/4.4.0.0^0)) with ESMTPS (cipher=ECDHE-RSA-AES256-GCM-SHA384 subject=“/C=US/ST=California/L=San Francisco/O=salesforce.com, inc./OU=0:app;1:ia5;2:ia5-sp5;3:na209;4:prod/CN=na209-app2-33-ia5.ops.sfdc.net”) id CC/9C-29431-33437A46; Thu, 06 Jul 2023 21:37:55 +0000
Date: Thu, 6 Jul 2023 21:37:55 +0000 (GMT)
From: “Walmart Trust & Safety” [email protected]
Reply-To: [email protected]
To: REDACTED BY ME
Message-ID: -WE6-000000000000000000000000000000000000000000000RXE9F700xQSHvUxoTiiGgtGCBeCSxA@sfdc.net
Subject: SUBJECT: Regarding your Inform Act Seller Verification - Action Required[ref:a6C8Y000000gmiyUAA:ref]
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=“----=_Part_36420_960044063.1688679475325”
X-Priority: 3
X-SFDC-LK: 00D61000000ZKTc
X-SFDC-User: 0054M000004g7OL
X-Sender: [email protected]
X-mail_abuse_inquiries: Salesforce Email Abuse Policy | Salesforce
X-SFDC-TLS-NoRelay: 1
X-SFDC-Binding: 1WrIRBV94myi25uB
X-SFDC-EmailCategory: apiSingleMailViaApex
X-SFDC-Interface: internal
Looks like it checks out. Don’t quote me on that.
@ASV_Vites both @Roxy and @SA_FL received their notifications from [email protected].
You did not.
Not saying yours is authentic or not, but it’s certainly different. 
I am partially-hamstrung by not having access to the FULL Internet Header, and by not knowing exactly which e-mail client (program) you copied this from - but I’ve been a Mail Admin longer than most humans have been alive, and at the first blush, I would agree w/ our friend Default:
Looks legit to me.
Gmail
I got the same email that Roxy and SA got too on June 30th.
This appears to be a follow up.
If it is real, it sucks. Looks like a 12 year old wrote it with English as their third or fourth language.
Not doing anything just yet.
If Walmart is using salesforce.com to send their emails, then it could be legit.
The email appears to be sent from the salesforce.com domain and the IP address (13.110.78.166) that sent the message is also salesforce.com.
Still strange that it wouldn’t direct you to provide the requested information through their website though… I certainly wouldn’t reply to the email with any documentation…
