Double Check Your Gift Cards
Gift card fraud affects digital and physical gift cards alike. While fraudsters may approach gift card fraud with a variety of scams, the goal is to ultimately steal the funds from the cards while remaining undetected.
Most likely you’ve probably bought and/or received at least one gift card this year. Whether it was for a birthday, holiday, special event or “just because,” gift cards are the most wanted – and most popular gift in the U.S. for nearly any occasion.
With a 200 percent increase in digital gift cards last year, it can be easy to forget these cards hold real monetary value that fraudsters want to take for themselves. Gift card fraud is on the rise, as Flashpoint cited a notable increase in discussions surrounding gift cards on the Dark Web in 2017. Let’s look at some ways that fraudsters use scams to commit gift card fraud.
Scams Turn Into Fraud
Gift cards are meant to be hassle-free options for special occasions, yet they often lack the proper security protocols to prevent tampering and fraud. The increase in digital gift cards has motivated companies to take a closer look at the security controls like implementing various website defenses and monitoring for non-activated card numbers. However, fraudsters – as always – continue to find ways around these security mechanisms.
Over $1 billion in unused gift card funds is lost each year. Fraudsters capitalize on these stagnant gift card balances by using both traditional and digital scam tactics to take over accounts. Below are three common scams that fraudsters use to obtain and misuse gift cards:
#1 DIY Gift Card Fraud
This type of fraud stems from more traditional means of scamming, requiring the scammer to enter the store and physically record gift card account numbers and security codes. The scammer captures the gift card account numbers and security codes manually and replaces the scratch-off site with a look-alike sticker. Then, the scammer simply waits for individuals to load money on the card before using the funds and abandoning the card.
“Crooks can see as soon as someone activates the [stolen] card because they’ve automated all this with software that periodically checks the card balance via the Internet.”
– David Farquhar, FBI Criminal Investigative Division
#2 Gift Card Fraud 2.0
With the increase in digital gift cards, fraudsters are taking gift card fraud online. Instead of physically capturing account numbers from the cards themselves, cybercriminals use networks of connected devices like computers and IoT devices to gain access into online gift card accounts.
One security expert says that more than 90 percent of gift card website logins come from botnets attempting to take over gift card accounts. Botnets are used to try and guess account numbers and security codes by searching through millions of number combinations and patterns. The botnet is programmed to search for ones that match, then use the information found to take over the card.
#3 From Gift Card to Cash
This scam often acts as “step two” in the gift card fraud process (after first obtaining a stolen gift card). Once criminals obtain stolen gift cards, they have to find a way to utilize the funds without being detected. Since gift cards cannot be exchanged for cash in most cases, fraudsters find ways to distance themselves from the stolen, or “dirty” funds in exchange for legitimate “clean” money.
Let’s say you’re shopping for a television online, and you find a $1,200 TV being sold for $800. You’re not one to pass up a deal, so you purchase the $800 TV and wait for it to arrive.
In reality, the ad was posted by a scammer who used the discounted price to attract unsuspecting scam victims. The premise is to convince you to pay the “discounted” price with legitimate funds (i.e. owned credit/debit card) and get rid of the stolen gift card evidence.
The end of this story can go one of two ways:
- The transaction is fully completed to avoid suspicion. The scammer uses the stolen gift card to purchase the advertised television, send it to you and accepts the $800 payment, or;
- The scammer abandons the transaction, takes the $800 payment and runs.
No matter how this story ends, scammers utilize this money laundering scheme to kill two birds with one stone: rid themselves of stolen gift cards, and exchange them for legitimate, usable funds.
What should I do?
Whether you’ve bought or received gift cards this year, use these tips to avoid falling victim to gift card fraud:
- Purchase gift cards directly from the source. This decreases your chances of buying a tampered or stolen card.
- If you’re buying gift cards in-store, avoid ones that are displayed in high-traffic areas. Cards that are kept behind the desk are less likely to be tampered with.
- Address gift card fraud immediately. If you believe that you purchased a tampered or stolen card, contact the retailer immediately and work with them to get your money back. As an EZShield customer, you can always reach out to the Resolution Center if you have questions or need help resolving any fraud or identity theft incident.
- When buying gift cards for someone else, consider changing the security code as soon as you can. This decreases the chances of fraudsters accessing the funds loaded on the card – especially if the recipient does not use the card right away.
Continue following Fighting Identity Crimes to get the latest breach and scam updates, as well as ID Protection news and tips from our industry experts.
The views and opinions expressed in this article are those of EZShield Inc. alone and do not necessarily reflect the opinions of any other person or entity, including specifically any person or entity affiliated with the distribution or display of this content.