SardineCon SF/2026

Learn More
Fraudology

Secret shopper scams: A special release of The TEA podcast

Guest: Hailey Windham

In this episode, I’m doing something a little different. Instead of only talking about scam education programs in theory, I’m sharing a live example of one that Hailey Windham created inside SAFE Federal Credit Union. It is an internal podcast called The TEA, which stands for Training, Education and Awareness, and honestly, it is exactly the kind of practical fraud awareness training I wish more organizations would build.

A couple of weeks earlier, Hailey joined me to talk about the work she has done to spread fraud and scam awareness across her organization and community. This episode lets you hear what that looks like in practice. And that matters. Because it is one thing to say employee fraud awareness is important. It is another thing to create something people will actually listen to and remember.

The scam at the center of this episode is secret shopper scams. Or, in some cases, mystery shopper scams. These are social engineering scams that often sound simple at first, but they can create real harm for consumers, retailers, and financial institutions. Especially when gift cards are involved.

I also like this episode because it does not just describe the scam. It helps people understand the scam victim journey, the pressure tactics criminals use, the retailer gift card fraud piece, and the financial institution scam response challenges that come after the money is already moving.

Here is what that scam education approach means in practice:

  • Fraud awareness training works better when teams can hear realistic examples, not just policy language
  • Secret shopper scams are a strong example of how social engineering scams exploit trust, urgency, and confusion
  • Consumer scam prevention depends on helping people recognize scam red flags before money is gone
  • Scam education programs can create real value for employees, customers, and members when they are practical and easy to engage with

What you’ll hear in this episode:

  • Why Hailey created an internal fraud training podcast for SAFE Federal Credit Union employees
  • How secret shopper scams and mystery shopper scams typically work
  • What the scam victim journey looks like from first contact to financial loss
  • Why gift card scam awareness matters for retailers, credit unions, and consumers
  • How employee fraud awareness and consumer fraud alerts can reduce harm before scams escalate

You should listen to this episode if you:

  • Lead fraud awareness initiatives and want fresh ideas for internal education
  • Work on scam prevention for credit unions, banks, or other financial institutions
  • Need better consumer scam prevention messaging around gift cards and social engineering
  • Want to understand the operational impact of secret shopper scams on multiple parties
  • Are building scam education programs and want examples that feel practical instead of generic

If you liked this episode, be sure to subscribe and review the podcast on iTunes, Spotify, YouTube, or wherever you listen to podcasts. It really helps with getting the word out.

Episode notes & key takeaways

Why secret shopper scams keep working

Let’s break this down.

Secret shopper scams are not new. But they keep working because they are built around something very familiar: a believable opportunity that sounds just legitimate enough to lower someone’s guard. The victim thinks they are being offered a job, an evaluation assignment, or a chance to earn money by testing a retailer or service. At first glance, it can sound harmless. Helpful, even.

But when you look closer, it falls apart.

The whole setup is usually designed to move the victim toward sending money, buying gift cards, or handling funds in a way that benefits the scammer. And because the person believes they are participating in a structured program, they may not realize they are being manipulated until the loss is already underway.

This is exactly the kind of vulnerability criminals look for. They do not need complex malware if they can get someone to follow instructions willingly.

  • Secret shopper scams often start with a fake opportunity designed to feel routine and trustworthy
  • Mystery shopper scams rely on social engineering more than technical sophistication
  • Scam red flags usually show up in the form of urgency, unusual payment instructions, or requests involving gift cards
  • Consumer scam prevention starts with helping people slow down and question the setup

How gift cards become central to the scam

Here’s what’s actually happening.

A big part of many secret shopper scams is the use of gift cards. That is not random. Criminals like gift cards because they move value quickly, they are easy to redeem or resell, and once the code is shared, recovery is difficult. That usually does not end well for the victim.

In these scams, the victim may be told to buy gift cards as part of the “assignment,” evaluate the purchasing experience, or send card details back to the supposed employer. The explanation changes. The outcome usually does not.

This is why gift card scam awareness matters so much.

Retail employees may see the purchase happen. Financial institutions may see the customer withdraw or transfer funds. But unless someone connects the dots early, the scam can keep moving because the transaction itself may not look obviously fraudulent at first. It just looks unusual. And unusual is not always enough without context.

  • Gift card scam awareness helps teams understand why these scams move money so quickly
  • Retailer gift card fraud often begins with a consumer who does not realize they are being manipulated
  • Consumer fraud alerts should explain why no legitimate employer needs payment through gift cards
  • Scam red flags include pressure to act fast, secrecy, and instructions to send codes after purchase

Why the scam victim journey matters for fraud teams

This is where things get interesting.

A lot of scam education focuses on the scam itself, which is important. But I also think it is critical to understand the scam victim journey. Because when you understand how someone gets pulled in, the warning signs make more sense.

It often starts with trust. A message, a check, a promise of work, or instructions that seem organized enough to feel real. Then comes momentum. The victim starts following steps. They may deposit something, buy something, or communicate with the scammer more than once. By the time something feels off, they have already invested time, emotion, or money into the story.

That is part of why social engineering scams are so effective. They do not just trick people once. They guide them through a sequence.

And that matters for financial institution scam response. Because by the time a member or customer reaches out, they may feel embarrassed, confused, or unsure how to explain what happened. Good teams need to understand that human side too, not just the payment trail.

  • The scam victim journey often includes trust-building, step-by-step instructions, and escalating financial loss
  • Social engineering scams work by creating confidence before creating urgency
  • Financial institution scam response improves when teams understand how victims were persuaded
  • Fraud awareness initiatives should address not just the scam mechanics, but the emotional pressure involved

Why fraud awareness training inside organizations can make a real difference

One of the strongest parts of this episode is the example Hailey provides through The TEA podcast. This is not just a discussion about employee education. It is a working example of it.

I talk all the time about how fraud teams need better ways to communicate risk internally. Not just with policy memos. Not just with annual training slides people click through while half reading their email. Real communication. The kind people remember because it sounds relevant to the work they do and the people they serve.

That is what makes this kind of fraud training podcast so useful.

It gives employees context. It helps them recognize patterns. It creates shared language around consumer fraud alerts, scam prevention for credit unions, and the real-world impact of fraud on members and staff. And honestly, it also makes the work feel more connected to the mission of protecting people, which matters more than some organizations realize.

  • Fraud awareness training is more effective when it is practical, consistent, and easy for employees to engage with
  • Employee fraud awareness improves when examples are grounded in real scam scenarios
  • Scam education programs can support both customer protection and internal readiness
  • Fraud awareness initiatives work better when they feel relevant instead of procedural

The big takeaway from this episode is pretty simple. Secret shopper scams are effective because they combine trust, urgency, and a believable story with payment methods that are hard to recover once the damage is done. But this episode is also about something bigger. It is about how organizations can build smarter, more practical ways to educate their teams and protect the people they serve. And honestly, that is the part I hope more companies pay attention to.

Host
A smiling woman with short brown hair and glasses, wearing a black and white striped blazer.
Karisse Hendrick
Ecommerce Fraud Prevention Consultant