Gift Card Fraud
Gift cards used as an irreversible scam payment rail and cash-out vehicle: victims coerced into buying cards, stolen cards and accounts converted to gift value, and balances drained or tampered.
What it is
Gift cards are a payment rail with the properties fraudsters want: easy to buy anywhere, value transferable by reading out a number, fewer consumer protections than credit cards, nearly irreversible once spent, and convertible to goods or cash. The FTC has repeatedly flagged gift cards as a scam payment method because they let scammers get cash quickly and anonymously, and are largely irreversible (FTC Data Spotlight, 2018).
Four distinct mechanisms share the gift card rail:
| Mechanism | Value source | Who loses | Who can intervene |
|---|---|---|---|
| Scam payment | Victim buys cards with their own money | Victim | Retailer at the register; victim's bank; card issuer if reported fast |
| Stolen-payment cash-out | Stolen card, ATO'd account, or bad ACH funds used to buy gift cards | Merchant (chargeback) or platform | Merchant fraud screening; issuer |
| Rewards and balance laundering | Farmed or stolen points, cashback or store credit redeemed into gift cards | Rewards program | Program's redemption controls |
| Card balance theft | Balance on a legitimately purchased card stolen before or after the buyer uses it | Purchaser or recipient | Program manager; retailer packaging and activation controls |
Gift card fraud overlaps with Card-Not-Present Fraud (as a monetization path), Loyalty and Rewards Redemption Fraud (as a redemption option), and Impersonation Scams and Elder Financial Exploitation (as the payment step).
How it works
In scam payments, the gift card is the rail, and the fraud happens in the conversation that leads to the purchase. FTC data shows scammers often name specific brands and stores, keep victims on the phone during the purchase, coach them on what to tell cashiers, and sometimes send them to several stores (FTC Data Spotlight, 2021). The store-hopping shows that scammers treat the cashier as a control point and route victims around it.
Transaction footprint
| Stage | What you see in the data | Decision point |
|---|---|---|
| Purchase (scam) | High-value gift card purchase by a customer with no history of buying them; older customer; multiple cards of the same brand; purchase at several nearby stores; customer on the phone | Point-of-sale intervention: cashier prompts, purchase limits, warnings |
| Purchase (stolen payment) | Digital gift card bought online with a new card or new account; email delivery to a different address; high denominations; many cards per order | Pre-auth scoring; hold digital delivery |
| Funding source (bank view) | Customer's debit card or account shows unusual gift card merchant spend, or cash withdrawals followed by retail spend | Bank-side scam detection |
| Redemption (rewards) | Reward balance redeemed into gift cards right after a contact change or new device; bulk redemptions | Redemption step-up; payout holds |
| Balance use | Card redeemed within minutes of activation, online, far from the purchase location; balance inquiries at volume | Program manager monitoring; balance-check throttling |
| Report | Victim calls the issuer or retailer; balance already spent | Freeze remaining balance; refund policy |
Common variants
| Variant | What's different | Where it shows up |
|---|---|---|
| Impersonation scam payment | Victim believes they're paying a government agency, utility, tech company or bank | Retail POS; see Impersonation Scams |
| Romance and relationship scams | Ongoing requests for cards over weeks | See Elder Financial Exploitation |
| Stolen card to digital gift card | Instant digital delivery; resale market exit | Ecommerce; see Card-Not-Present Fraud |
| Wallet token to gift card | Fraudulently provisioned token buys gift cards in store | See Digital Wallet Provisioning Fraud |
| Rewards redemption cash-out | Farmed or ATO'd points converted to gift cards | Cashback, Coupons and Rewards |
| Card tampering | Physical cards altered in-store so that the balance is diverted when activated (conceptual) | Retail gift card racks |
| Balance enumeration | Automated guessing or checking of card numbers to find funded balances (conceptual) | Balance-check pages and APIs; analogous to Card Testing |
| Business email gift card requests | Employee asked by an impersonated executive to buy cards | Corporate; out of scope except as payment step |
Where it shows up
- Retail and Ecommerce: retailers are both the point where scam victims buy cards and the merchant on the hook for stolen-card digital gift card purchases. Cashier training and purchase limits are the main scam controls.
- Cashback, Coupons and Rewards: gift cards are a common payout option. That makes them a favored cash-out for Referral Abuse, Sign-Up Bonus Abuse and ATO of reward balances. Instant gift card delivery has the same irrevocability as an instant payment. See Loyalty and Rewards Redemption Fraud.
- Online Marketplaces: secondary gift card resale is a conversion channel; marketplaces selling gift cards inherit both stolen-card and laundering risk.
- Neobanks and Consumer Fintech and banks: see the funding side, such as a customer's account used to buy large amounts of gift cards, or cash withdrawals before a retail purchase. Banks can intervene before the card is purchased.
- Payments and P2P: P2P sends sometimes "buy" gift cards from individuals as part of laundering flows.
Impact
- Scam losses: FTC data showed reported gift and reload card losses rising from $70.6 million in 2018 to $147.8 million in just the first nine months of 2021; in that period, about one in four people who reported losing money to fraud said they paid with a gift card, the most-reported payment method from 2018 through 2021 (FTC Data Spotlight, 2021; FTC press release, 2021). In 2022, consumers reported more than $228 million in gift card fraud losses across about 48,800 reports (ITIF, 2023). For 2024, the FTC recorded about $212 million in gift and reload card losses (ABA Business Law Today, 2026).
- Falling share of losses: gift card losses have plateaued while bank transfers and crypto have grown far faster, so gift cards are now a smaller share of total scam losses. They remain a high-frequency method, with per-victim harm that skews toward older adults.
- Median loss rising: the median gift card loss rose from $700 in 2018 to $1,000 in early 2021, and losses of $5,000 or more grew from about 8% to 14% of reports (FTC Data Spotlight, 2021).
- Merchant and program losses from stolen-card purchases and drained balances, plus customer service and remediation costs.
- 2025 figure not yet in hand. As of October 2026, we hadn't confirmed a 2025 gift-card loss figure. The FTC's March 2026 congressional testimony on 2025 data ranks bank payments, then crypto, as the top loss methods, and gives no gift-card number. Pull the payment-method table from the 2025 Consumer Sentinel Data Book to extend the trend line.
Red flags
- Customer with no history buying high-value gift cards, particularly older customers or those on an active phone call → Scam Victim Indicators, Customer Contact Signals
- Multiple cards of one brand, round denominations, repeat visits or multiple stores in a day → Basket and SKU Anomalies, Velocity Signals
- Digital gift card bought with a new card, new account, or mismatched recipient email → Payment Instrument Signals, Email Risk Signals
- Rewards redeemed to gift cards right after a contact or device change → Promo and Reward Redemption Patterns, Account Change Events
- High-volume balance checks from automated traffic → Automation and Headless Browser Signals
Prevention and detection at a glance
| Layer | Control or signal | What it does here |
|---|---|---|
| Prevent | Customer Education and Scam Warnings | Register prompts, packaging warnings, and in-app messages: no legitimate agency asks for payment by gift card |
| Prevent | Velocity and Exposure Limits | Per-transaction and daily gift card purchase limits; digital card limits for new accounts |
| Prevent | Rate Limiting and Throttling, Bot Management and CAPTCHA | Protects balance-check endpoints from enumeration |
| Detect | Real-Time Transaction Risk Scoring | Scores digital gift card purchases and reward-to-gift-card redemptions |
| Detect | Bank-side scam analytics | Spots customers funding large gift card purchases |
| Respond | Withdrawal and Payout Controls | Holds on reward redemptions into gift cards after risk events |
| Respond | Rapid issuer freeze | If reported before use, remaining balance can sometimes be frozen |
| Respond | Trusted Contact and Senior Investor Holds | Escalation paths for suspected elder exploitation |
Emerging variants and adversary adaptation
- Shift toward faster, larger rails. As retailers added purchase limits and cashier interventions, scam payment volume shifted toward bank transfers and crypto, which carry larger per-victim losses. In 2024, bank transfers (about $2.09 billion) and crypto (about $1.42 billion) dwarfed gift cards (about $212 million) in reported losses (ABA Business Law Today, 2026). Gift cards remain the fallback when other rails block a payment.
- Splitting to dodge the cashier. FTC data describes scammers sending victims to several stores and coaching them on what to say (FTC Data Spotlight, 2021). Compensate with cross-store limits where possible, and bank-side detection that sees the customer across stores.
- Digital gift cards as the CNP exit. As physical cards get more scrutiny, digital delivery is the preferred stolen-card exit. Holding digital delivery for risky orders is the most effective control here.
- Rewards as a laundering layer. Converting ATO'd or farmed reward balances into gift cards is now a common cash-out where direct bank payouts are well controlled.
- Better data is a policy ask. ITIF has argued the FTC should collect whether scams involve virtual, mobile or physical cards and pilot data sharing among retailers, issuers and resale markets (ITIF, 2023).
Related mechanisms
- Impersonation Scams, Elder Financial Exploitation, Authorized Push Payment (APP) Scams: the scams that use gift cards as the rail
- Card-Not-Present Fraud and Digital Wallet Provisioning Fraud: stolen-payment gift card purchases
- Loyalty and Rewards Redemption Fraud: rewards-to-gift-card laundering
- Card Testing: the conceptual analog for balance enumeration
- Money Mules: resale and conversion layers
Real-world examples
- FTC Data Spotlight (December 2021): gift card scam losses in the first nine months of 2021 exceeded all of 2020, with impersonators of businesses and government agencies prominent (FTC press release).
Sources and further reading
- FTC testimony to the Joint Economic Committee (March 2026): 2025 data: bank payments and crypto as top loss methods; no gift-card figure given
- FTC Data Spotlight: Scammers prefer gift cards, but not just any card will do (Dec 2021): losses by year, share of reports, median loss, brand and store steering
- FTC press release: Major increase in gift cards as scam payment method (Dec 2021): 2021 headline figures
- FTC Data Spotlight: Scammers increasingly demand payment by gift card (Oct 2018): why scammers prefer gift cards
- ITIF: The FTC should improve data collection to mitigate gift card scams (2023): 2022 figures; policy recommendations
- ABA Business Law Today: Consumer Sentinel data (2026): 2024 losses by payment method
- See also Reports and Data Sources