Gift card draining is the tampering of cards on a shop's rack: the packaging is opened, the card number and PIN are copied, and the card is resealed and put back. When somebody buys it and loads money on, the balance is taken automatically. Homeland Security Investigations attributes it to organised crime and runs a dedicated initiative, Project Red Hook.
Almost every scheme on this site needs you to do something: answer a call, click a link, believe a story, send money.
This one needs you to buy a birthday present.
A card is lifted from an open rack. The packaging is opened, the card number and PIN are copied or photographed, and the card is resealed and put back. Weeks later somebody buys it, loads $100 onto it, and the balance is drained automatically — often before the card has been handed to anybody.
There is no contact, no persuasion and no deception of the purchaser. Homeland Security Investigations describes the packaging being re-done so that it is difficult to tell that the product has been compromised, which is the whole craft.
HSI attributes it to organised crime and runs a dedicated initiative against it, Project Red Hook — because the point is not the $100. It is that a US gift card balance can be turned into consumer goods, exported and re-sold, which makes a rack in a supermarket a route for moving value out of the country.
From open racks in shops chosen for footfall — supermarkets, pharmacies, petrol stations — where the display is unattended.
Serial numbers and PINs exposed or removed. Sometimes cut out, sometimes scratched off, sometimes the packaging is carefully opened and the data photographed.
The step that makes it a trade rather than a theft.
Where it could have stopped
The craft of this scheme is producing packaging that survives exactly the inspection shoppers are told to perform, so “check for tampering” is weaker advice than it sounds. Buying from behind the counter, and checking the balance the moment the card is activated rather than when the gift is used, does more than examining the wrapper.
The purchaser has been contacted by nobody and deceived by nobody. They have bought a product from a shop.
The card details are already held, and the balance is watched. It is taken as soon as it appears — frequently before the card has been given to anyone.
The balance can only be redeemed at the issuing retailer, so it buys high-value consumer products. This is the conversion the whole business depends on.
HSI’s description is trade-based money laundering: value leaves the country as cargo rather than as a transfer.
There is no moment of decision to get right. Every other page on this site describes a point where a person could have acted differently. Here the purchaser does nothing wrong at any stage.
The advice is weaker than it sounds. Inspecting packaging is the recommended defence, and defeating that inspection is the specific skill being sold.
The purchaser and the discoverer are different people. You buy the card; your nephew finds it empty. Neither of you has the receipt and the knowledge, which is why so little of this is reported and why retailers see complaints months late.
Delay is built in. Gift cards sit in drawers. By the time a card is used, the transaction is old, the receipt is gone, and the retailer’s goodwill window has closed.
Nobody owns the problem. The issuer says the card was validly redeemed. The retailer says it sold a sealed product. The purchaser has no fraud to report in the usual sense, and often blames the shop.
And the loss per card is small enough to absorb. $50 here, $200 there — beneath the threshold at which anyone escalates, and multiplied across an entire rack.
Organised, transnational, and treated as a homeland security matter rather than a retail one.
HSI attributes it to Chinese organised crime groups, and describes them as combining three things that are usually studied separately: organised retail crime, victim-assisted fraud, and trade-based money laundering. That combination is the insight worth taking from this page.
Three techniques, one output. Tampering cards on shelves. Attacking gift card accounts online through phishing or hacking. And the familiar victim-assisted version — impersonating an authority figure, getting somebody to buy cards and read out the codes, then sending those codes to colleagues in the United States.
All three produce the same asset: valid US gift card balances controlled by the operation. What follows is identical in every case — the balances buy goods, the goods are shipped overseas, and the goods are re-sold for local currency.
Which is why it exists at all. A gift card balance is close to useless as money. It cannot be transferred, withdrawn or sent abroad; it can only be spent at one retailer. The scheme is not really about stealing $100 — it is a mechanism for converting American retail credit into exportable value, and HSI states the proceeds support further illicit activity including fentanyl production and smuggling, illegal migration and human trafficking.
And nobody can size it. HSI puts global gift card fraud losses in the hundreds of millions of dollars. The FTC’s $212 million across 41,120 reports in 2024 counts the victim-assisted version only; draining is not broken out by anyone. This site has no figure for it, and we would rather say that than borrow one that measures something adjacent.
Homeland Security Investigations' guidance to retailers describes the core problem with card draining: the packaging is opened, the card data taken, and the card re-packaged in a way that makes the tampering difficult to see. Its recommendations are all about the shop rather than the shopper, which is a judgement about where this can actually be stopped.
Homeland Security Investigations runs a dedicated initiative against Chinese organised crime groups exploiting gift cards. Its account is the clearest available: three techniques — tampering cards on shelves, attacking accounts online, and laundering codes bought by scam victims — combining organised retail crime, victim-assisted fraud and trade-based money laundering.
US consumers reported losing $212 million on gift or reload cards across 41,120 reports in 2024 — the sixth-largest payment method by losses, well behind bank transfers at $2.09 billion. The gap is the point: gift cards are used for the scams that take hundreds, and they are the method most likely to go unreported entirely.
Before you buy. Ask for a card from behind the counter if the retailer keeps them there. If you are buying from a rack, take one from the back, check the packaging, and keep the receipt with the card rather than in your wallet.
Immediately after activation, check the balance online or by phone. This is the single most useful step on the page, because it converts a months-later discovery into a same-day dispute with a receipt in your hand.
If a card is empty.
If you were told to pay someone in gift cards. That is a different scheme and the response is different — see utility shut-off scams and government impersonation. The short version: nobody legitimate has ever asked to be paid that way.
Nowhere, until it becomes something else.
A drained balance cannot be transferred, withdrawn or sent abroad. It can only be spent at the retailer that issued it — which is why the next step is always a purchase, and why HSI’s description of the scheme ends in freight rather than in a bank.
Balances buy high-value consumer goods. Those goods are shipped overseas and re-sold for local currency. That is textbook trade-based money laundering, and it is the reason a gift card rack is attractive to an organised operation: it is a way of turning American retail credit into exportable value without a single bank transfer.
There is no mule account here, no crypto wallet and no wire to recall. The value crosses the border as cargo with paperwork, and the laundering is complete at the point the goods are sold.
The other half of this story
Our sibling site Clean on Paper explains how goods are used to move value across borders — and why a shipment of electronics is harder to stop than a transfer of the same amount.
Completely. In the payment version somebody talks you into buying cards and reading out the codes — that is covered across this site as a payment method. In draining, nobody contacts you at all. You buy a card that was already compromised before it reached the till, and the money disappears once you load it.
Sometimes, and less often than the advice implies. Check for torn edges, a compromised pull tab, a missing PIN cover or mismatched branding. But HSI's own description is that cards are re-packaged so that it is difficult to tell the product has been compromised — defeating that inspection is the craft of the thing.
Buy from behind the counter where the retailer offers it rather than from an open rack. Keep the receipt with the card. And check the balance immediately after activation rather than when the gift is eventually used — that is the difference between a dispute you can evidence and a discovery months later.
You paid, they discover it, and neither of you is the one who lost the card data. That split is why so little of this gets reported: the purchaser often never learns, and the recipient has no receipt and no standing to claim.
Sometimes, with the card and the receipt, and it depends on the retailer's policy rather than on any legal right. Report it to the issuer immediately — many can trace where the balance was redeemed, and speed matters because it is usually spent within hours.
Because HSI treats it as organised crime with a laundering purpose rather than as retail loss. Its account is that balances are spent on high-value goods that are exported and resold, and that the proceeds support further illicit activity including fentanyl smuggling and human trafficking.
Report it
Reporting is what produces the enforcement data on this page. Find the right agency and phone number for your country on the report page. If money moved in the last few hours, call your bank first.