Here’s a warning from Walmart and the Oregon Attorney General:
If you received an email with the title “Thanks for your Walmart.com order” from “Wallmart.com” (with two L’s) but you did not place an order, please know that this is NOT from Walmart.com, and appears to be a phishing scam attempting to gather information. Do not click on any of the links in the email. Please delete the email.
Check your statements to see if any unauthorized charges were placed or are pending and monitor your statements.
If unauthorized charges were placed, please contact your bank or credit card company to dispute the charges. Your financial institution is the best avenue to recover funds.
For emails received from “Wallmart.com” (with two L’s), a Walmart order was not actually placed. At this point it appears that no accounts were accessed, but you can delete any saved payment information and reset your password as a preventative measure.