What is triangulation fraud?

‍Triangulation fraud is when a fraudster poses as an online seller, takes payment from a real buyer, then fills that order using a stolen card at a real merchant. Three parties sit in the chain, and only one knows a fraud is happening. All three steps have to happen for it to count, so a single stolen-card purchase is ordinary true fraud instead.

How triangulation fraud works

The retailer owns the goods and a stolen card pays for them, so the fraudster risks nothing of his own. Nobody ever charges the buyer's own card.

The scheme runs in three stages:

• List: post a desirable item on a marketplace or a lookalike storefront, often underpriced.
• Collect: take the buyer's payment, which is real money into the fraudster's own account.
• Fulfill: order the same item from a legitimate retailer on a stolen card, shipped to the buyer.

The underpriced listing is the bait. In Experian's account, the fraudster lists a desirable item at "an unusually low price", such as a pair of headphones.

He then buys those headphones from a real retailer on a stolen card and has them shipped to the buyer.

The buyer gets what he ordered, on time, so nobody complains.

The scheme starts when somebody else's card pays the retailer. A reseller buying stock with his own money, even at a markup, is running a business.

Why triangulation fraud matters for merchants

The retailer in the middle eats the whole loss. The goods have already shipped by the time the true cardholder disputes the charge, so you're out the product and the payment.

The cardholder never placed the order, so proof of delivery counts for nothing here.

The goods are gone too, sitting with a buyer who won't hand them over.

None of this shows up in the checks your checkout runs. SEON notes that in this scheme "every actor present in the scam may initially appear legitimate". A valid card, a matching CVV, and a clean authorization will usually all pass.

Not every attempt gets that far, though. Some orders fail an address or velocity check first, and catching one there costs far less than fighting it later.

Triangulation fraud vs. true fraud

In true fraud the thief buys for himself, and in triangulation fraud a real buyer gets the goods. Your actual customer in a triangulation order is innocent.

The difference shows up at checkout, in who you're dealing with:

Say a stolen card ships to an address in the cardholder's own town. That reads as ordinary true fraud. Move the same order two states away, to a name the bank doesn't recognize, and you're looking at triangulation.

Either way, your dispute plays out the same. Both arrive under a fraud reason code, and without an alert both cost you the order.

The difference matters most when you're trying to spot one.

How to detect and prevent triangulation fraud

Catching triangulation fraud means checking where the card's owner lives against where the order is going. The signal sits in the gap between those two addresses.

Four checks each catch a different part of the pattern:

• Address verification (AVS): flags a shipping address that doesn't match the cardholder's billing address.
• Device and IP intelligence: catches repeat orders from one seller paid with different stolen cards.
• Velocity checks: flag a cluster of orders pointed at one shipping destination in a short window.
• A fraud-scoring tool: Signifyd, Riskified, and Kount score sessions on device and behavior signals.

Checking the order's email address and IP adds a second layer, what SEON calls "digital footprint analysis". VPN use and an odd hardware setup are the device signals worth scoring.

Set your velocity rule on the shipping address as well as the card. Four orders to one address on four different cards in a day is the tell card-level checks miss.

Review a new seller account by hand when it has no reviews, no trading history, and a price well under everyone else's.

Our alerts catch what these checks miss. When the true cardholder disputes the charge, an Ethoca or Verifi alert reaches you in time to refund first.

Do all of this and you become the expensive target, so the fraudster moves on to a store that checks less.

Our ROI calculator shows what those chargebacks are costing you.

FAQ

Can triangulation fraud happen without eBay or Amazon?

Yes, since the fraudster only needs a storefront that takes payments, like his own site or a social media shop. A large marketplace supplies the buyer traffic for free.

Who pays for the loss in triangulation fraud?

The retailer has no one to recover from, because the buyer did nothing wrong and the fraudster is gone. Getting the money back depends on police tracing the seller account, and that trail usually ends at a closed account.

How is triangulation fraud different from drop-shipping?

A drop-shipper's supplier ships knowingly and keeps the money. The retailer in a triangulation order ships on a card whose owner never authorized the purchase.