Investigation

How gift card draining works — and how to spot a tampered card

The fraud happens before you ever buy the card. Here is exactly how it works, and the four things to check on the rack.

Last updated 20 September 2026 · 7 min read

Short answer: Criminals take gift cards off the rack, record the number and PIN, and put them back. When you buy the card and load it, automated bots spot the new balance and spend it within minutes. The card in your hand was compromised before you reached the till — and because a drained balance is almost never replaced, the money is gone.

The mechanic, step by step

This is not a hack. There is no breach of the retailer's systems. The entire fraud relies on one design flaw: a gift card number plus its PIN is the whole credential. There is no password, no account, no second factor. Whoever holds those two strings can spend the balance.

The waiting period is what makes this work: a copied card is worthless until someone loads it.

The National Cybersecurity Alliance describes the method plainly: criminals “take gift cards off shelves and steal the cards’ information, often by photographing or writing down the codes and PINs”, then return them to the display. Once a card is bought, they “monitor the card online or use bots to check balances regularly” and drain the funds the moment a balance appears.

The Federal Trade Commission gives the same warning from the consumer side: “Scammers can get the gift card number and PIN before you buy the card.”

Four things to check on the rack

A tampered card almost always shows physical evidence. Before you take one to the till:

Run a finger over the barcode: The BBB advises this specifically. A fraudulent sticker placed over the real barcode can be felt even when it cannot easily be seen.
Check the PIN panel: Any scratching, scuffing or partial removal of the silver strip means the code underneath has been read.
Look at the packaging seams: Tears in the zigzag cuts around the edge, or visible paper fibres along a border, indicate a blade was used to open and reseal it.
Take from the back: Tampered cards are returned to the front of the rack to be picked up quickly. Cards further back have been handled less.

If a card looks disturbed in any way, take a different one and tell a member of staff. Retailers do want to know — a tampered card on their rack is their problem too.

The second scam: fake balance-check pages

Draining requires physical access to a card. The online version needs none.

Search for any brand plus “gift card balance” and the results fill with pages offering to check it for you. Some are ordinary guides. Others host their own entry form — and the two fields they ask for, card number and PIN, are the entire credential.

You hand over everything needed to spend your card, and the page tells you a balance to keep you calm while it does.

The rule is simple and has no exceptions: a legitimate guide sends you to the retailer’s own website, app or phone line. It never collects those digits itself. If a page asks you to type a card number and PIN into that page, close it — whatever it looks like, whoever it claims to be.

Three further signals of a fake:

It wears the retailer’s branding. Real independent guides do not dress up as the brand they are writing about.
The address bar is not the retailer’s. Check it before typing anything, every single time.
It offers to convert your balance to cash. Retailers do not do this. Pages claiming to are collecting card details.

If your card has already been drained

Call the retailer immediately. The number is on the card or on their gift card page. Speed matters — some retailers can freeze a card mid-spend.
Have the receipt ready. Several retailers will only investigate or replace a balance with proof of purchase. Target and DSW both state this explicitly.
Report it to the FTC at ReportFraud.ftc.gov. This is how the pattern gets tracked, even when your individual balance is not recovered.
Tell the shop you bought it from. A drained card usually means others on the same rack were tampered with too.

Be realistic about recovery. Most retailers state plainly that a lost or stolen balance is not replaced. Target is an unusual exception — it will replace a card with the original receipt — which is a good argument for keeping receipts on any card you do not spend immediately.

How to buy a gift card safely

Buy digital where you can. An eGift card sent by email never sat on a rack.
Buy from the retailer directly rather than a third-party rack in a supermarket or pharmacy, which are the usual targets.
Register the card to an account if the retailer offers it. This is the single most effective protection, and it is free.
Spend it reasonably promptly. A loaded card sitting unused is the exact thing bots are scanning for.
Keep the receipt until the balance is spent.

Check a balance the safe way

Every guide on this site links out to the retailer’s own balance checker. We never ask for a card number or PIN, and we have no form that could accept one.

Sources. FTC — Gift Card Scams · National Cybersecurity Alliance — Gift Card Draining · BBB — Before Purchasing a Gift Card. Retailer-specific terms are cited on each brand guide.