Gift card scams are frauds in which criminals take money stored on gift cards, either by persuading a victim to buy cards and hand over the numbers, or by stealing card details before a genuine buyer loads money onto them. Scammers favour gift cards because the value can be spent or resold within minutes, the cards carry no name, and a payment made with them is very hard to reverse.
The term covers two broad families. The first is a payment scam built on social engineering: a caller or message impersonates a government agency, a utility, a tech-support desk or an employer and demands payment in gift cards. The second is card tampering, often called card draining, where criminals record or swap the details of cards still on the store rack. Both differ from ordinary card fraud, because no stolen bank card or account takeover is needed.
Gift card scams in plain terms
A gift card works much like cash in a sealed envelope. Whoever knows the code printed on the back can spend what is inside, and nobody checks who they are. A scammer therefore does not need the card itself, only the long number and the PIN. Once the victim reads those out over the phone or sends a photo, the money is effectively gone.
The tampering version is like someone steaming open envelopes in a shop, copying what is written inside, resealing them and putting them back on the shelf. The buyer pays at the till, the card is switched on, and the thief, who has been waiting for that moment, spends the balance first. In both versions the victim did nothing technically wrong at the checkout, which is why these frauds are so effective.
How gift card payment scams work
Most payment scams follow the same script. A victim receives a call, text or email claiming an urgent problem: unpaid taxes, a frozen bank account, a computer virus, a relative under arrest, or a request from a manager who is "in a meeting". The caller insists the problem can only be fixed with gift cards, names a specific brand and store, and often stays on the line while the victim shops, coaching them on what to tell the cashier. Many are run by organised operations like those in the call centre scam and Indian call centre scam entries, and the workplace variant overlaps with business email compromise.
The US Federal Trade Commission (FTC) has tracked the pattern for years. In a December 2021 Data Spotlight it reported that nearly 40,000 people lost $148 million through gift cards in the first nine months of 2021, and that about one in four people who reported losing money to fraud said they had paid that way. Target cards carried the largest reported losses, followed by Google Play, Apple, eBay and Walmart. The FTC's message is that no genuine business or agency demands gift card payment.
Card draining and tampering
Card draining targets cards before they are sold. Thieves take unactivated cards from a display, open the packaging, record the card number and PIN or cover the barcode with one linked to a card they control, then reseal the package and return it to the rack. When a shopper buys and loads the card, the criminals spend or transfer the balance within minutes. Warning signs include torn or reglued packaging and a scratched PIN area.
US authorities treat draining as organised crime and a form of money laundering. Homeland Security Investigations began Project Red Hook after meeting retail executives in November 2023, focusing on networks that move drained value abroad through mobile wallets and cryptocurrency. States have also legislated: Texas Senate Bill 1809 added a gift card fraud offence (Penal Code §32.56), in force from 1 September 2025, which covers acts such as bringing tampered cards into a store and placing them on a rack.
Why gift cards attract fraud
- Anonymity. Most retail gift cards are bearer instruments with no registered owner, so the person holding the code controls the funds.
- Speed and resale. Balances can be spent online at once or sold on card-exchange sites, and drained value is often moved on through Bitcoin ATMs or crypto exchanges.
- Weak recourse. In the US, the Regulation E gift card rules govern fees, dormancy and expiry, but gift cards sit outside the error-resolution rights that the wider Regulation E gives debit cardholders, so there is no statutory right to a refund.
- Light identity checks. Closed-loop store cards fall largely outside the US prepaid access rules, which limit customer checks for small amounts.
The same features make gift cards convenient for honest buyers and help explain issuer breakage income. Payment scams of this kind resemble authorised push payment fraud, because the victim initiates the purchase.
Prevention and reporting
Retailers have responded with warning signs at displays, purchase limits, tamper-evident packaging and cashier training to question customers buying many cards while on the phone. Major retailers work with law enforcement through the Gift Card Fraud Prevention Alliance. Shoppers can cut their risk by buying cards kept behind the counter, checking packaging and keeping receipts. Wider fraud prevention advice applies too: hang up on anyone demanding urgent payment and call the organisation back on a known number.
A victim should contact the card issuer immediately, since unspent funds can sometimes be frozen. In the US, reports go to the FTC at ReportFraud.ftc.gov. The same scripts appear in Canada, the United Kingdom and Australia, where national fraud agencies issue similar warnings. Gift card demands also feature in pig butchering romance scams and other confidence scams, where the fraudster has built trust over weeks.