Gift Card Scams: How They Work and How to Stay Safe

Short answer: any request to pay a bill, tax, fine, refund, or debt with a gift card is a scam, without exception. Legitimate businesses and government agencies do not accept iTunes, Apple, Google Play, Steam, Amazon, or Vanilla Visa gift cards as payment. Once you read the code off the back of the card to a stranger, the money is almost always gone for good. This guide breaks down how the scam works in 2026, why it keeps growing, and the small set of checks that stop it in every situation.

Why gift card scams have exploded

Gift card scams are now the number one payment method reported in consumer fraud complaints to the US Federal Trade Commission. In its 2024 Consumer Sentinel Data Book, the FTC recorded consumer losses of more than 217 million dollars to gift card fraud in a single year, with a median loss per victim of around 200 dollars and older adults reporting the largest individual losses. In the UK, the National Cyber Security Centre and Action Fraud have both flagged the same tactics in official advisories through 2025 and into 2026.

Three things make the gift card a scammer’s ideal payment tool:

• It is irreversible. A gift card code is like cash. Once the code is redeemed on the other side, there is no chargeback, no dispute window, no bank recall.
• It is anonymous. The buyer does not need to know who they are paying, and the redeemer does not need a bank account, an ID, or a real name.
• It is easy to buy in bulk. Every supermarket, drugstore, and petrol station has a rack of gift cards near the checkout. A victim can be sent to a physical shop to buy 500 dollars in Apple cards in ten minutes.

Add a convincing story on the phone and you have a fraud that scales.

How the scam actually works, step by step

Almost every gift card scam follows the same four-step script, whatever the cover story is:

1. Manufactured urgency. A stranger contacts you by phone, text, email, or social media with a story that must be resolved right now. Common covers: an unpaid tax bill, a suspended utility account, a hacked bank account, a family member in jail, a delivery fee for a package, an overdue Microsoft or Apple security fee.
2. Isolation. They tell you not to hang up, not to talk to your bank, not to speak to a family member. If you do, they say, the problem will get worse or the criminals will win. Real institutions never ask this.
3. The specific payment instruction. They send you to a nearby shop to buy gift cards for a very specific amount, from a very specific brand: Apple, Google Play, Steam, eBay, Amazon, Vanilla Visa, or Target. They may even stay on the phone with you inside the shop.
4. The code hand-off. Back in the car or at home, they ask you to scratch the panel and read the 16 or 19 digit code aloud, or photograph it and send it. The moment you read that code, the money is redeemed elsewhere in the world, often within seconds.

Every version of the scam collapses into that same four-step pattern. The story on top can change weekly. The mechanics do not.

The most common cover stories in 2026

These are the versions currently reported most often to consumer-protection agencies and to our own review inbox. If a caller uses any of these frames and then asks about gift cards, you are talking to a scammer:

• Government impersonation. Fake IRS, HMRC, Social Security, or Medicare officials claiming you owe back tax or that your Social Security number has been “compromised.” No tax authority in any country accepts gift cards.
• Tech support. Fake Microsoft, Apple, or Norton pop-ups or calls telling you your computer is infected and you must pay for a “security licence.” The pop-ups are triggered by ad networks and simple JavaScript, not by any real infection. See our guide on how to check if a website is safe before you click.
• Utility shut-off. A caller claims to be from your electric, gas, or water provider and threatens to cut you off within the hour unless you pay by gift card. Real utilities send written notice and offer standard payment methods.
• The grandparent or family emergency. A caller claims a grandchild, niece, or spouse is in jail or in hospital abroad and needs bail or a fee paid in Apple cards. The story is engineered to short-circuit thinking.
• Fake employer or boss text. A text purporting to be from your CEO or manager asks you to “quickly grab some Amazon cards for a client gift” and send the codes. Nearly every organisation with more than 100 staff has now seen this.
• Romance and cryptocurrency “investment” scams. A person you met online, sometimes over months, eventually asks you to buy gift cards to “top up” a wallet or unlock a payout. There is no wallet, and no payout.
• The refund overpayment. A caller claims to refund you money for a cancelled service but says they accidentally sent too much, and asks you to send the difference back as gift cards. The initial “refund” is fake.

What real institutions actually do

The single fastest way to stop a gift card scam is to know what real organisations look like on the phone:

• Tax authorities (IRS, HMRC, Finanzamt) contact you first by physical mail, not by phone, and never accept gift cards.
• Utility companies send written arrears notices before shut-off and accept standard payment methods.
• Banks do not ask you to move money to a “safe” account or to buy gift cards to “protect” your funds.
• Apple, Microsoft, Amazon, and Google do not cold-call customers about compromised accounts or “activation” fees.
• Courts and police do not accept gift cards for bail, fines, or warrants.

If any of these entities appears to be asking for gift card payment, the request is fraudulent. That rule has no exceptions.

Warning signs in the moment

When you are already on the phone, the following signals should stop you cold:

• The caller insists you stay on the line while you drive to the shop or walk to the till.
• They tell you what to say if a cashier asks why you are buying so many cards.
• They ask you to buy cards from more than one shop to avoid “attracting attention.”
• They give you very specific denominations, often 100, 200, or 500 dollars, and specific brands.
• They ask you to peel the panel and read out the code, or to photograph it.
• They threaten arrest, deportation, service cut-off, or family harm if you delay.

Cashiers at major US retailers are now trained to flag exactly these signs. If a shop assistant asks who the cards are for and why, that is not nosiness, it is a fraud check. Many prevented losses come from a checkout worker interrupting the transaction.

What to do if it has already happened

If you have already read the code out, act inside the next hour if you can. Some cards are redeemed instantly, others sit in a queue for a few minutes:

1. Call the gift card issuer directly. Use the number on the back of the card or the official website. Ask for the “fraud team” and explain the card was used in a scam. Have the card, the receipt, and the code ready.
2. Do not throw the card or receipt away. The card number, PIN, and receipt are the evidence that lets the issuer trace the redemption.
3. Report to your national fraud line. In the US, file with the FTC at reportfraud.ftc.gov and, if the amount is meaningful, with the FBI’s IC3 (ic3.gov). In the UK, report to Action Fraud (0300 123 2040) or by webform. In Germany, file with the local police and the BSI’s Verbraucherzentrale.
4. Report the retailer transaction. If you bought the cards with a credit or debit card, tell your bank right away. Some issuers can, in rare cases, dispute the purchase of the physical cards themselves before they are activated.
5. Tell a trusted person. Victims of these scams often report months of self-blame. The scripts are engineered against everyone’s cognition, not against your intelligence.

Recovery rates are honestly low. The FTC estimates recoveries below 10 percent for gift card fraud. Reporting still matters because it feeds the pattern data that stops the next call.

How to protect older parents and relatives

Adults over 60 report the largest median losses to gift card fraud, largely because government-impersonation and grandparent-emergency scripts target them directly. A short, calm conversation now saves the panic call later:

• Agree a family “safe word” that has to be given in any emergency call asking for money. No safe word, no money.
• Explain that no legitimate agency, ever, accepts iTunes, Apple, Google Play, or Steam cards as payment.
• Encourage them to hang up on any unexpected call about tax, arrest, computer viruses, or family emergencies and to call you or the agency back on a verified number.
• Register their landline on the appropriate do-not-call list to reduce call volume.
• If they use a smartphone, turn on the built-in spam call filter (Silence Unknown Callers on iOS, Call Screen on Android).

Our companion guide on the most common online scams in 2026 covers the wider pattern, of which gift card fraud is now the biggest single payment channel.

Retailer refund policies at a glance

Retailers have tightened refund policies in response to fraud volumes. In practice this means recovery is rare, but not impossible if you act fast:

• Apple. Contact Apple Support and ask for the App Store & iTunes Gift Card fraud team. If the code has not been redeemed, Apple can sometimes freeze it. Redeemed balances are almost never returned.
• Google Play. Report at support.google.com/googleplay and provide the card serial number and receipt. Google follows the same pattern: hold if unredeemed, closed case if redeemed.
• Amazon. Amazon’s fraud team can be reached via customer service. They can occasionally recover funds if the balance has not been spent.
• Vanilla Visa, Mastercard prepaid cards. Contact the issuer number on the back of the card. These are the hardest to recover because the funds are treated like a bearer instrument.
• Steam. Report through Steam Support. Steam will lock the account that redeemed the code but rarely refunds the original victim.

The single-rule defence

If you want one rule that closes almost every gift card scam attempt: never pay a bill, fee, tax, fine, refund, bail, or debt with a gift card. Not once. Not for anyone. Not even if the caller sounds official, angry, tearful, or panicked. A gift card is a gift. If the payment is not a gift, it is not a gift card transaction.

Combine that rule with the standard trust checks from our pillar on how to tell if a website is trustworthy, our companion piece on how to check if a website is a scam, and our review directory at webwiki.com, and you have a defensive floor that catches nearly every version of the fraud before it takes your money.

Frequently asked questions

Can I get my money back after a gift card scam?

Sometimes, but not usually. If you report to the card issuer within minutes and the code has not yet been redeemed, they can freeze it. Once the balance has been spent on the other side, recovery is very rare. Reporting to the FTC, IC3, or your national fraud line is still worthwhile because it feeds the disruption effort against the underlying operations.

Why do scammers always ask for Apple, Google, or Steam cards specifically?

Because those brands are easy to convert on secondary markets, easy to redeem from anywhere in the world, and offer no dispute channel. Vanilla Visa and other open-loop prepaid cards are the second favourite for the same reasons.

Are QR codes at petrol pumps or on parking meters a new gift card scam?

They are a related payment scam but a different mechanism. Rather than gift cards, criminals stick fake QR codes over legitimate ones and route your payment to their own account. We cover this pattern in a dedicated post on QR code scams.

Is a call from Amazon saying my account was hacked always a scam?

Yes, if it is unsolicited. Amazon does not cold-call customers about account security. If you are worried, hang up and log into your account directly from a browser you type in yourself, not from a link in an email.

What should I do if a cashier asks who my gift cards are for?

Answer honestly. Major US retailers now train their staff to flag exactly this pattern, and their questions have stopped many transactions in progress. If you are being scammed, saying so at the till is often the last moment recovery is possible.

Sources and further reading

• US Federal Trade Commission, Consumer Sentinel Network Data Book 2024, published February 2025, reportfraud.ftc.gov.
• US FBI Internet Crime Complaint Center, Internet Crime Report 2024, ic3.gov.
• UK National Cyber Security Centre, guidance on gift card and impersonation fraud, ncsc.gov.uk.
• UK Action Fraud, actionfraud.police.uk, national reporting line and case data.
• Apple Support, gift card scam recovery process, support.apple.com.
• Google Play Help, redemption and refund policy for gift cards, support.google.com/googleplay.
• Amazon Customer Service, gift card fraud response procedure, amazon.com/help.