Gift cards are safe and convenient payment and gift options—evident by their widespread popularity and use. According to the National Retail Federation, gift cards have been the most popular gifts in America for 14 years in a row—in addition to being popular incentives and rewards. According to Fiserv, 64 percent of people even buy gift cards just to spend on themselves!People love giving, receiving, and using gift cards in physical or digital (egift) form, but unfortunately so do fraudsters. Without the proper safeguards in place, criminals can abuse gift cards, just as they can abuse debit cards, credit cards, or checks.
To help raise awareness among our members, the RGCA has pulled together a list of the most common types of fraud and scams that involve gift cards:
Credit and Debit Card Fraud
Fraudsters steal credit card information and use it to buy gift cards or merchandise, book travel, and make other unauthorized purchases.
Criminals steal a product and return it to get a refund loaded onto a gift card.
Account Takeover Fraud
Fraudsters hack into a customer’s online account and gain access to gift card data—allowing them to drain or transfer the balance.
Victim Assisted Fraud (Elderly, IRS, Tech Support Scams)
A scammer impersonates someone like a grandchild, the IRS, or a tech support team and demands payment in the form of gift cards.
Social Engineered/Internal Fraud
Criminals target retail employees and trick them into activating stolen gift cards, providing data needed to redeem gift cards such as gift card numbers and/or PINs, or granting access to the merchant’s registers by claiming to be members of the company’s IT department servicing the equipment.
Fraudsters steal or alter the gift card’s number and/or PIN in stores. “Skimming” is a type of product tampering.
Fake Fraud Claims
Fraudsters claim to be victims of gift card fraud in attempts to receive compensation from retailers or gift card exchanges.
Upstream System Access Fraud
Fraudsters hack into gift card processing systems, distribution centers, and stock locations that create and/or store physical and digital card information.
Fraud Prevention Tactics
We continually monitor fraud trends so we can keep our members apprised of emerging or changing fraudster strategies.
As an industry, we must be dedicated to fighting fraud by continually sharing our collective knowledge, pooling resources and expertise, and collaborating to defend our customers and businesses from criminal activity.
Here are some fraud prevention tactics we encourage our members to consider to safeguard their programs and their customers:
Card Data & Technology:
• Incorporating randomized PIN codes on gift cards.
• Using technology that flags suspicious activity before, during and after activation and redemption.
• Using complex algorithms to prevent gift card data replication.
• Using online service providers to create algorithms that can evaluate whether a purchase is being made by a cardholder or fraudster.
• Only using supply chain partners that employ strict security protocols for handling card data and inventory.
• Requiring multi-factor authentication (MFA) that adds an extra login step to ensure the person trying access or use gift cards is the rightful owner of the balance.
• Using software like CAPTCHA and bot managers during gift card purchase and registration processes.
o CAPTCHA is a program that distinguishes human from machine input to protect websites from bots that fraudulently extract gift card data.
• Using packaging techniques to cover and protect card data, magnetic stripes, and gift card PINs.
• Using print and material techniques that make it hard to counterfeit gift cards.
• Educating cashiers about how to inspect gift card packaging for tampering before selling to consumers, watch for suspicious buyer behavior like purchasing gift cards in large quantities, and recognize other cues of fraudulent activities.
• Ensuring cashiers do not activate or sell gift cards that have exposed PIN numbers.
• Making sure you have a defined escalation steps to respond to fraud quickly when it does occur so you can shut it down.
• Regularly re-examining and updating return policies to prevent fraudsters from being able to return stolen merchandise for store-issued gift card refunds that can be re-sold to unsuspecting consumers.
• Continually reviewing cashier training and point-of-sale (POS) processes to implement safeguards and controls at the time of purchase. This includes measures that are intended to keep fraudsters from being able to manipulate checkout systems and new cashiers.
o For example, limiting or eliminating cashiers’ ability to manually enter card numbers during purchases and turning off gift card purchases at remote registers overnight.
• Practicing and clearly communicating requirements for lost, stolen, and damaged cards that require proof of ownership.
Cooperation & Partnerships:
• Cooperating with distribution partners to investigate potential fraud.
• Working with reputable gift card exchanges and gift card malls as authorized gift card sellers.
• Cooperatively coordinating with law enforcement to identify and prosecute fraudsters.
• Sharing best practices with consumers to help them recognize and avoid fraud.
• Working with your social listening team to monitor key words that may indicate fraudulent activity (i.e. gift cards at 50% off).
• Storing physical gift cards in secure locations before they are activated and distributed to retailers or gift card malls.
• Vaulting and transferring egifts using file-protected and encrypted methods.
• Mailing inactive cards to their final destinations and activating once the purchaser validates the receipt of the cards.
As a final step to fight fraud, you can help educate shoppers so they can avoid scams and have safe, positive gift card experiences
Consider uploading these tips to your gift card websites, showcasing on in-store displays, posting to social media, and sharing via other relevant channels:
• Decline ANY unsolicited demands for payment by gift card online or over the phone. Gift cards are only an acceptable form of payment with their affiliated brand, so if someone contacts you claiming to be from a police department, a utility company, the IRS or another third party informing you that you owe money and must pay via gift card, hang up the phone, delete the email, and cut off communication. You cannot pay outstanding speeding tickets, back taxes, or any similar types of bills using gift cards and are likely being targeted by a scammer. The elderly are often targeted for these common types of scams, so be sure to inform your friends, family and peers.
o To report IRS impersonation scams to the Treasury Inspector General for Tax Administration, visit their website or call 800-366-4484.
o If you think you’ve been scammed, contact the FTC at ftc.gov/complaint or via this toll-free number: 1-877-FTC-HELP.
• Check physical gift cards for package tampering before you buy them. If the scratch-off material covering the card’s PIN number is uncovered, pick another card and show the questionable card to a store associate.
• Buy gift cards directly from retailers, trusted sources and known brands—especially when you buy online.
• Store your gift cards securely. Keep physical cards in a wallet, purse, or other secure place. If the card has a PIN covered by scratch-off material, leave the scratch-off material in place until the PIN is required. Keep egifts secured in an account or mobile wallet that is password-protected with a strong password and multi-factor authentication (MFA).
• Never share gift card account or PIN numbers with people you don’t know.
• Send physical gift cards via trackable shipping methods and egifts via a secure email or mobile programs that are password protected.