Reshipping fraud recruits people, often through fake work-from-home jobs, to receive goods bought with stolen cards and forward them abroad. It launders physical goods so the proceeds are harder to trace, turning a card fraud into an untraceable international shipment.
What is reshipping fraud, in plain English?
Reshipping fraud is a way to cash out stolen card details as physical goods. A fraudster buys high-value items with a stolen card, but shipping directly to themselves, especially overseas, is risky and easy to block. So they insert a middle step: a person in the cardholder's country receives the package at a local address, then forwards it on to the fraudster abroad.
That middle person is usually a reshipping mule recruited through a fake work-from-home job, a "package forwarding" or "logistics coordinator" role that promises pay for receiving and re-sending parcels. Most reshippers do not realize they are laundering stolen goods, and their own identity often gets abused in the process, sometimes never paid at all.
From the merchant's side, reshipping breaks the usual signal that a fraudulent order ships somewhere suspicious. The delivery goes to a legitimate-looking local address, which is why the tells are in the mismatches and the linkage: billing and shipping that do not line up, freight-forwarder or reshipper addresses, and one address tied to many different cards.
How a reshipping scheme runs
- Recruit — Hire the mule. A fake work-from-home job lures someone into receiving and forwarding packages for pay.
- Buy — Order with a stolen card. The fraudster purchases high-value goods and ships them to the reshipper's local address.
- Forward — Re-send abroad. The reshipper repackages and forwards the goods to the fraudster overseas, often via a provided label.
- Discard — Burn the mule. The reshipper is dropped, frequently unpaid, and their identity may be reused for more fraud.
Who is involved?
Who | Their role |
The fraudster | Buys goods with stolen cards and directs the reshipping abroad; the ultimate beneficiary. |
The reshipping mule | Receives and forwards packages, usually an unwitting victim of a fake job scam. |
The cardholder | The real card owner whose details were stolen to fund the purchases. |
The merchant | Ships the goods, eats the chargeback, and must catch the shipping-linkage signals. |
What it looks like in practice
In practice
Someone answers an online listing for a flexible "package inspection and forwarding" job that pays per parcel. Boxes of premium electronics start arriving at their home, addressed to various names, with prepaid labels to re-send them to an address in another country.
For the merchant, the orders looked domestic and passed basic checks, but the billing names never matched the shipping name at the reshipper's house, and that single address soon showed up against a dozen different cards. When the real cardholders report the charges, the chargebacks land, the goods are already overseas, and the reshipper, unpaid, is left holding the paper trail.
Why it matters to operators
Reshipping is designed to defeat geographic risk signals. Shipping straight to a high-risk country would be declined, so the scheme routes goods through a domestic address that looks perfectly normal on a single order. The fraud only becomes visible when you look across orders and see the same address collecting parcels paid for by many unrelated cards.
It also creates victims on two sides: the cardholders whose accounts were charged, and the reshippers whose labor and identity were exploited. That dual-victim shape complicates investigations. The practical defenses are address-reputation data, address verification checks that flag billing and shipping mismatches, and shipping-linkage analysis that connects one delivery point to multiple payment methods.
What to watch at checkout
- Billing and shipping mismatch. The cardholder name and address not matching the delivery name or location.
- Reshipper and forwarder addresses. Deliveries to known freight-forwarding hubs or residential addresses flagged for reshipping.
- One address, many cards. A single shipping destination receiving orders paid for by numerous unrelated cards.
- High-value, resellable goods. Concentration on electronics and luxury items that are easy to fence abroad.
- Rushed, generic orders. Expedited shipping with little account history and interchangeable recipient names.
Quick questions
Is the reshipper a criminal or a victim?
Usually a victim. Most reshippers are recruited through fake work-from-home jobs and do not know the goods were bought with stolen cards. They are often unpaid and may have their own identity abused, though they still handle the fraudulent goods.
Why not just ship straight to the fraudster?
Shipping directly abroad, especially to a high-risk country, triggers geographic risk checks and gets blocked. Routing through a domestic reshipper makes the order look local and normal, defeating those signals.
What is the clearest merchant signal?
Billing and shipping mismatches combined with one delivery address linked to many different cards. Address-reputation data and shipping-linkage analysis surface reshipping hubs that a single order would never reveal.
How does it launder goods?
By converting stolen card value into physical items and moving them across borders through an intermediary, the trail from the original fraud to the end recipient is broken, making the proceeds much harder to trace.
How is it linked to money mules?
A reshipper is essentially a mule for goods rather than money. The same fake-job recruitment tactics used for money mules are used to find reshippers, and the two schemes often share operators.
What should a team do when it spots a reshipping hub?
Block further orders to the address, review past orders linked to it, and treat the associated cards as compromised. Because the reshipper is often a victim, the goal is to stop the flow while recognizing they may have been deceived.
Go deeper
- FTC Consumer Advice: Scams ↗ — US consumer guidance on current scams and fraud, and how to report them.
- FBI IC3 ↗ — The FBI Internet Crime Complaint Center. Fraud reporting and annual trend reports.