SardineCon SF/2026

Learn More
Scams & social engineering4分 で読めます

Gift-card payment scamとは?

ニュースレターを購読

A gift-card payment scam is a con where the victim is told to pay by buying gift cards and reading the codes to the scammer, a fast and hard-to-reverse channel. By the time anyone realizes the demand was fake, the card balances are already drained and there is almost no way to claw the value back.

What is a gift-card payment scam?

A gift-card payment scam is not a standalone story; it is the payment method for other scams. Whatever the pretext, a tech-support warning, a tax debt, a prize fee, a boss asking for a favor, the scammer converges on the same instruction: go to a store, buy retail gift cards, scratch off the backs, and read out the codes. Once the codes are shared, the value is spent or resold within minutes.

Gift cards are attractive to fraudsters for three reasons. They are widely available at any grocery or pharmacy, they carry no name or recourse once the code leaves the victim's hands, and they can be liquidated fast through resale markets. A code is bearer value: whoever has it, owns it.

For fraud teams, the important framing is that a legitimate business or government agency never asks to be paid in gift cards. So the instruction itself, not the amount or the merchant, is the diagnostic signal. On the card issuer's side, the tell is a burst of high-value cards purchased and redeemed in an unusual pattern.

How a gift-card payment scam unfolds

The pretext varies but the payment step is always the same:

  1. PretextManufacture a reason to pay The scammer poses as support, the tax office, a lottery, or the victim's boss, and creates urgency.
  2. DirectSend them to a store They tell the victim to buy specific gift cards, often across several shops to avoid limits and questions.
  3. ExtractHarvest the codes The victim scratches off and reads out the numbers, or photographs the backs, while still on the phone.
  4. Cash outDrain and resell The scammer redeems the balances or sells the codes on secondary markets within minutes.

Who is involved?

Who

Their role

The scammer

Runs the pretext, keeps the victim on the line, and collects and liquidates the codes.

The victim

Buys the cards with their own money and reads the codes out, believing they are settling a real obligation.

The reseller network

Secondary marketplaces and launderers that convert card codes into cash or crypto quickly.

Retailer and card issuer

Sell the cards and process the redemptions, and hold the data that can flag abnormal buying and draining.

What it looks like in practice

A caller claims to be from a well-known software company and says the victim's computer is infected and their bank login is exposed. To secure the account, the victim must pay a one-time protection fee, but the only accepted method today is retail gift cards. The caller stays on the line while the victim drives to two stores and buys several cards to stay under the per-store limit.

Back home, the victim reads out each code over the phone. The caller confirms, then abruptly ends the call. The card balances are emptied within the hour. The victim's card statement shows several near-identical gift-card purchases in a single afternoon, from merchants they never normally use.

Why it matters for operators

Gift cards are the preferred cash-out for scams aimed at consumers precisely because they defeat recovery. There is no counterparty account to freeze, no wire to recall, and no chargeback once the code is read out. For the victim, the money is simply gone, and for the operator, there is rarely a downstream account to investigate.

That pushes the whole defense earlier, to the moment of purchase and redemption. A card issuer or bank that can spot multiple high-value gift-card buys in one session, or rapid full-balance redemptions from fresh cards, has a real chance to interrupt the scam before the codes are handed over. Front-line staff prompts at checkout are one of the few controls that reliably break the spell while the victim is still on the phone.

What to watch in the data

  • Bulk buys in one session. Several gift cards, often near the per-store limit, purchased across multiple stores in a short window by one customer.
  • Out-of-pattern spend. Gift-card purchases from a customer who never buys them, especially at high value or on a card used mainly for essentials.
  • Instant full-balance drains. Newly activated cards redeemed to zero within minutes, frequently from unusual geographies.
  • Phone-guided behavior. Support notes or branch reports of a customer who is on a call and insists the purchase is urgent and private.
  • Resale fingerprints. Redemptions clustering on known secondary-market platforms or converting straight to crypto.

Quick questions

Why do scammers love gift cards?

They are easy to buy anywhere, act as bearer value with no name attached, and can be drained or resold in minutes. Once a victim reads out the code, there is effectively no way to reverse it.

Will any real company ask for gift-card payment?

No. No legitimate business, bank, or government agency asks to be paid in gift cards. The request itself is a reliable sign of a scam, regardless of how convincing the pretext sounds.

Can the value be recovered after the codes are shared?

Rarely. Recovery depends on the card issuer freezing an unredeemed balance very quickly. In most cases the funds are drained before anyone reports it, so prevention at purchase is far more effective.

How does this relate to the underlying scam?

Gift cards are the cash-out step, not the con itself. The pretext might be tech support, a tax demand, a prize, or a fake boss request, but they all funnel to the same gift-card payment instruction.

What can a card issuer actually do?

Monitor for bulk purchases and rapid full-balance redemptions, apply velocity and value limits, and support retailer prompts that ask buying customers whether someone told them to pay this way.

Who ends up bearing the loss?

Almost always the victim, because they authorized the purchase with their own funds. That is why interrupting the transaction, rather than chasing recovery, is the priority.

Gift-card payment scamと併せて知っておきたい用語

レポート

2026年 不正・AMLレポート

予測は不要です。このレポートは、不正・AMLチームが実際に直面していることと、その対応方法を分解して解説します。

レポートをダウンロード