The scams start out innocently enough.
Maybe a phone call from someone who says he works for Amazon, claiming he noticed someone hacked into your account. Maybe someone who says she works for Microsoft, offering a refund for a computer security service you bought a few years ago that stopped working.
Lisa Hernandez was trying to reach Match.com, the dating site, to cancel her account when it happened to her. The 50-year-old single mother of four had signed up for the service but decided she didn’t want to stay with it.
She searched on Google for a customer service number to call. What she found instead was a fake website, built to look legitimate but with a phone number that connected her to a scammer posing as Match customer service. Kevin, the man on the other end of the line, said he could help. First, though, he told her she needed to install a program called TeamViewer, which allowed him remote control of her computer.
He then directed Hernandez to log into her bank’s website. “We’re going to directly refund you your money,” he promised and asked her to fill out a computer-generated form for her refund of $93. Instead, Kevin set his scam in motion by manipulating the code on her computer to make it look like he had deposited $9,000 into her bank account instead, effectively doubling her savings.
The only way to fix the mistake, he told her, was to buy gift cards with the extra money she’d received and give him the numbers. Then he could put the money back into Match’s bank accounts and all would be settled. “I need you to go to the store to get Target cards,” she remembers him saying. Otherwise, he’d lose his job. She did as he asked, giving him nearly $9,000 worth of gift cards.
Moments just like this happen to tens of millions of Americans every year. While it’s easy to assume most victims are elderly, surveys suggest it’s much broader. Victims are old and young, rich and poor. Some people get scammed multiple times. Some victims have family members who fight fraud for a living. It’s struck my family. Likely, it’s happened to yours, too.
When you think of computer crimes, identity theft usually comes first to mind. That’s because it cost Americans a staggering $56 billion last year, according to Javelin Strategy and Research. But it tends to feel more like an inconvenience than theft, because you usually get your money back thanks to a nearly half-century-old law designed to protect consumers from any “unauthorized” credit charges. The fees we pay help cover the losses to that fraud. But it’s different with gift cards — they have no such legal protections. When a victim shares the card number with a scammer, they’ve effectively authorized its use. Even identity fraud insurance, which would cover ID theft in the case of a data breach, often doesn’t apply when you’ve given the information willingly.
“If someone coerces you, then you’re out of luck,” said Kathy Stokes, director of fraud prevention programs at AARP.
It’s impossible to fathom how much money these scammers have taken. Many victims don’t report the crime to authorities, often because they’re embarrassed and quickly learn the hard truth that they’re unlikely to get their money back. So when the Federal Trade Commission counted more than $245 million in money lost to gift card scams since 2018, most experts said the actual number is likely many multiples worse than that.
“This is only the tip of the iceberg,” said John Breyault, vice president for public policy, telecommunications and fraud at the National Consumers League.
The anecdotal data suggests he’s right. The FBI’s Internet Crime Complaint Center, for example, said it receives more than 2,000 complaints each day about all sorts of internet scams, from fraudulent business impersonation to fake romances to gift card scams. All told, the FBI tallied $4.2 billion in fraud losses reported by victims last year.
Some stores put up signs next to gift card racks and checkout counters warning about fraud. Others say they’re training employees to spot potential victims. But they. “The business incentive in the gift card space is for these cards to be used with as little friction as possible,” Breyault said. “They don’t want to get into the way of someone buying a gift card and buying a Coke on the way out.”
From gift to fraud
The gift card industry is already larger than the gross domestic product of all but a handful of countries. It’s still growing, too, and surveys suggest its use is pretty evenly split along racial, gender and economic lines.
By 2027, gift card spending is expected to reach $2.7 trillion — topping all but the US, China, Japan, Germany and the UK. That’s already up from $1 trillion in 2020 when the COVID-19 pandemic supercharged consumer spending, according to Research and Markets. And this year, as a congested global supply chain is causing a shortage of some popular gifts, more than one in five people plan to use gift cards when shopping during the holidays, according to a YouGov survey commissioned by CNET parent company Red Ventures.
Retailers love gift cards, too. They get to hold onto any money we don’t spend for years, industry experts say. And when we do use up our gift cards, we tend to buy things more expensive than the gift card can cover, a term some companies internally call “up-spend.” So retailers try to make gift cards as easy to buy as they can. You can find all manner of gift cards for all sorts of things at drug stores, convenience shops and grocery chains.
After reading the FTC’s data last year, Stokes at AARP set out to take on gift card scams. In April, the organization began a three-year program to throw its educational and marketing weight behind the problem, and for good reason. One study it commissioned found that a quarter of US adults were unsure whether it’s a sign of a scam for a business to ask for payment in gift cards, something no legitimate business would do. AARP also built up parts of its website, Fraud Watch Network, publishing articles about the scams and examples of the scripts they use, and it expanded its fraud hotline with hopes of helping victims spot a scam as it’s happening.
So far, things haven’t gone as she’d hoped. “We thought it would be an easy message,” she said. But it turns out most of the people who end up coming to AARP for help do so after they’ve been scammed.
People like Hernandez. She got in touch after she was scammed in August. Though she’s accepted that the money’s mostly gone, she can’t shake how violating the whole experience was. As a nurse in the San Francisco Bay Area, Hernandez built her career on trust. She works a second job as a caregiver too, where she’s regularly given her client’s bank card to withdraw money from an account or buy stuff from the store. “I would never think of taking from them,” Hernandez says. “I would never betray that.”
Which is maybe why she trusted Kevin, who was begging her to buy gift cards. Hernandez spent $3,500 on seven Target cards, then withdrew another $5,000 to buy more. As she gave him the card numbers, Kevin told her not to look at her bank account for a couple days. She did anyway and found that the extra money he’d manipulated the bank webpage to show in her account was gone. Instead, she had just about $500 balance left.
Kevin called her again, saying one of the $500 cards didn’t go through. When she began to ask questions, one of Kevin’s colleagues got on the phone and began yelling at her. As they kept demanding Hernandez get more gift cards, the horrible realization dawned on her. “I said, ‘You just took my money.'”