%201.svg)
Triangulatiefraude: waarschuwingssignalen, risico’s en preventietips
Chargebacks?
Dat is niet langer jouw probleem.
Recover 4x more chargebacks and prevent up to 90% of incoming ones, powered by AI and a global network of 20,000+ merchants.
Meer dan 600 beoordelingen
TL;DR:
- Triangulation fraud (or a triangulation scam) funds a buyer’s order with a stranger’s stolen card, so the merchant that ships it takes the chargeback.
- The recipient and the cardholder may both be innocent victims, so review connected order signals before fulfillment without treating gifts as fraud.
- Proof of delivery does not defeat an unauthorized-payment claim, and Visa Compelling Evidence 3.0 needs a prior cardholder history that triangulation victims do not have.
- The window to stop it is after checkout and before shipment, where Chargeflow Prevent scans orders.
Triangulation fraud (also called a triangulation scam) is an ecommerce scheme in which a fraudulent seller collects payment from a buyer, then uses stolen payment credentials to order the product from a legitimate merchant for delivery to that buyer. The buyer may receive the goods while a separate cardholder discovers an unauthorized charge, and the merchant that shipped the order is left with the dispute.
The critical distinction is between the person receiving the package and the person whose card paid the legitimate merchant. They may both be victims, so a delivered order can still be an unauthorized payment.
How Triangulation Fraud Works: Two Payments and One Shipment
Adyen’s overview of payment fraud patterns describes triangulation as a fraudulent intermediary using stolen card data to purchase goods from a third party for another buyer. Map both payment relationships before investigating the order.
Follow the separate relationships
Two payments fund one shipment
1Buyer → fraudulent seller
The buyer pays the storefront or seller they believe is legitimate.
2Stolen credentials → legitimate merchant
The seller places a separate unauthorized order using someone else’s payment credentials. The cardholder may see an unfamiliar merchant charge.
3Legitimate merchant → buyer
The merchant ships the product to the buyer, who may receive goods from an unfamiliar store. That shipment does not establish authorization for the second payment.
The buyer and the cardholder may both be innocent. The fraudulent seller connects the two payment relationships; ordinary authorized resale or dropshipping does not establish this scheme.
The stolen credentials typically come from data breaches, phishing, or account takeover fraud, so the cardholder has usually never heard of your store. Fraudsters often confirm those cards first through card testing fraud on small checkouts. In a common variant, the scam storefront copies your product photos and descriptions, resells them at a discount on a marketplace or its own site, and then orders from you with the stolen card. Your catalog is the bait, and the first sign is often a support message from a recipient who thinks they bought from someone else.
The fraudulent seller retains the buyer’s payment while using someone else’s credentials to fund fulfillment. This is not simply an ordinary retailer earning the difference between wholesale and retail prices. The unauthorized payment is the defining feature of the scheme.
An ordinary dropshipper or reseller can use a legitimate fulfillment arrangement. Do not classify all third-party delivery or resale as triangulation fraud. Investigate the authorization and connected transaction facts.
Who Pays When a Triangulation Order Is Disputed
The issuer credits the cardholder, so the cost lands on the merchant that fulfilled the order, not on the scam seller. The illustration below uses a $300 product that the scam storefront sells to the buyer for $220.
Hypothetical $300 product / $220 listing
Follow the money when the stolen-card payment reverses
Buyer’s payment to the scam seller
$220
The buyer pays the fake listing and receives the $300 product. Their payment is a separate transaction.
Seller’s receipt
$220
The seller receives the buyer’s money; stolen credentials fund the merchant order.
Legitimate merchant’s reversed sale
$300 reversed
The sale payment is removed. Unrecovered goods, shipping, and applicable dispute fees remain costs.
Cardholder’s claim
The issuer credits the unauthorized $300 charge in this example. That credit does not return the merchant’s goods or refund the buyer’s separate $220 payment.
Invented prices and a fully reversed unauthorized payment. Actual outcomes depend on the case and applicable protection. Do not add the reversed $300 sale to goods cost as though both were separate direct cash losses; investigate costs and any recovery separately.
$5+ Total cost of fraud for every $1 of direct fraud loss, US retail and ecommerce | $50 Maximum cardholder liability for unauthorized credit card charges under federal law | 120-365 days Settlement window for the two prior transactions Visa Compelling Evidence 3.0 requires |
Sources: LexisNexis Risk Solutions, True Cost of Fraud study (2026 retail and ecommerce edition); Federal Trade Commission, credit card loss protection; Adyen documentation on Visa Compelling Evidence 3.0, linked below.
The cost reaches beyond the refunded sale. The LexisNexis study counts fees, staff time, and recovery effort on top of the lost order, and chargeback fees apply even to cases you cannot contest. Fraud-coded disputes also add to the chargeback thresholds that card networks monitor, so a cluster of triangulation cases matters beyond each individual loss. For a wider view of the impact of triangulation fraud on ecommerce store owners, including reputation damage, see our earlier overview.
How to Identify Triangulation Fraud Without Blaming the Recipient
No single signal proves triangulation. Review unusual combinations of cards, accounts, delivery destinations, product choices, and order timing, and pair each signal with a check that rules out a legitimate explanation. A different billing and shipping address alone is common in legitimate gift orders, so on its own it is weak evidence of shipping address fraud.
| Signal | Waarom dit belangrijk is | Check Before Acting |
|---|---|---|
| One shipping address paid for with several different cards | Repeated deliveries funded by changing credentials are the core pattern | Households, offices, and dorms share addresses legitimately, so look for card changes within a short window. |
| Billing name or email unrelated to the recipient, with no gift note | The payer and the receiver may not know each other | Gift orders are common, so combine with other signals before holding the order. |
| Easy-to-resell consumer goods, such as electronics or small appliances, in retail quantities | Scam storefronts need products that sell quickly at a discount | Bestsellers also draw ordinary buyers, so check whether the product is a catalog bestseller. |
| Shipping instructions changed after checkout | Fraudsters may redirect an order once the buyer supplies a destination | Customers move or correct typos, so verify through your secure support process. |
| A recipient who recognizes the product but not your store | Your catalog may be the bait for a marketplace listing | Gift recipients also ask who sent an order, so confirm the order number before escalating. |
| Fraud reports, alerts, or earlier disputes linked to the same address | This is confirmed evidence rather than a pattern | Label it as confirmed in your case records so rules can use it. |
Avoid automatic accusations based on an address or household connection. The recipient may have paid a fraudulent storefront in good faith. The repeat-claim investigation workflow provides useful recordkeeping principles, but triangulation should not be mislabeled as friendly fraud by the innocent buyer or cardholder.
How to Prevent Triangulation Fraud Before Goods Leave Your Control
Layer the controls in your ecommerce fraud prevention program around the window between checkout and shipment: contextual post-purchase order review, supported authentication, and clear escalation rules for suspicious transactions. If a case needs verification, use your established secure process rather than asking the recipient to provide someone else’s card details. Do not expose payment information in email or support attachments.
Where your processor supports it, 3D Secure 2 sends the authentication challenge to the real cardholder, which a seller working from stolen card details usually cannot pass, and an authenticated payment can move fraud liability to the issuer. Confirm eligibility with your acquirer. Chargeflow Prevent scans each order after checkout and before fulfillment, trained on data from 20,000+ merchants, so a risky order can be verified or cancelled before the product ships. Also search marketplaces for copies of your product photos and descriptions and file takedown requests, because each removed listing closes a source of orders.
Before shipment
Connect the order hold to fulfillment and support
Review the concern
For merchants using Shopify, connect order review to the actual fulfillment status so staff can act before shipment where supported.
Keep the reason visible
Record the reason for the hold and assign the supported verification or escalation step.
Record the resolution
Make the outcome visible to support, including verified customers whose orders proceed.
Use a secure verification process. Do not request someone else’s card details from the recipient or accuse a buyer based on an address match alone.
The card-not-present fraud guide explains why payment checks and fulfillment controls need to work together. A broader merchant fraud protection program should also review customer impact as well as fraud reduction: an overly broad rule can block legitimate gifts, resellers, or households while leaving a more complex pattern undetected.
Respond When the Cardholder Reports Unauthorized Payment
Start with the actual chargeback reason code, provider instructions, and case deadline. A genuine unauthorized-payment claim may be valid even when your merchant team fulfilled the order correctly.
Visa Compelling Evidence 3.0 targets friendly fraud on reason code 10.4. Visa's merchant FAQ states that it needs at least two earlier transactions on the same payment method, settled 120 to 365 days before the dispute, with two matching data elements such as IP address or device ID. A cardholder who never shopped with you has no such history, so a triangulation dispute usually cannot use it. When chargeback alerts reach you before a case becomes a formal chargeback, use the window to refund or hold the order.
Review the transaction’s authentication and any applicable protection with your provider. Where a supported response exists, submit the relevant facts and records. Where it does not, focus on resolving the case and reducing further exposure. Automation can improve handling; it cannot turn an unauthorized purchase into an authorized one.
Use the issuer evidence guide to distinguish fulfillment evidence from authorization evidence. The case documentation workflow can help create a clear transaction timeline without claiming that every connection proves fraud.
Help Buyers and Cardholders Report the Right Transaction
Different people · different payments
Route the report to the payment it concerns
Buyer paid the fraudulent seller
Preserve the seller listing, receipt, messages and shipping details. Report through a verified marketplace or payment-provider channel.
Cardholder sees an unauthorized merchant charge
Contact the card issuer or payment provider promptly about that separate payment.
These can be different reports about different transactions. The shipment recipient may be an innocent buyer; do not infer consent to the stolen-card payment from delivery.
The FTC guidance for people who were scammed recommends contacting the relevant payment company and taking appropriate account-security steps. Do not promise that the buyer can keep the item or must return it to a particular address without reviewing the facts and legitimate instructions.
If your support team receives a recipient’s report, connect it to the relevant order securely. Avoid demanding an additional payment or sending sensitive cardholder details to the recipient. Preserve evidence and coordinate the next step with the payment provider and appropriate internal team.
Measure Confirmed Cases and Close the Operational Gap
Track suspected and confirmed triangulation separately from other payment fraud types. Record the source of confirmation, affected orders, goods shipped, credits, and final dispute outcomes. Do not present all ecommerce fraud losses or general card-fraud statistics as triangulation-specific losses. To compare triangulation with other schemes, see the main types of chargeback fraud.
Review how the order passed screening, whether a pre-shipment signal was available, and how support handled the first report. If a refund and dispute overlap, use the refund reconciliation workflow before issuing another credit. Share corrected case labels with the teams that maintain prevention rules.
Veelgestelde vragen
What is triangulation fraud in ecommerce and how does it work?
Triangulation fraud is a scheme in which a fraudulent seller takes payment from a buyer, then orders the product from a legitimate online store with a stolen card and has it shipped to the buyer. The buyer gets real goods, the cardholder sees an unauthorized charge, and the merchant that shipped the order faces a fraud dispute.
Is a triangulation scam the same as triangulation fraud?
Yes. A triangulation scam and triangulation fraud describe the same scheme, sometimes called a triangle scam. Buyers tend to say scam because they paid a fake seller, while merchants and card issuers say fraud because a stolen card funded the order.
Can the buyer be innocent in triangulation fraud?
Yes. A buyer may pay a fraudulent seller in good faith and receive goods purchased elsewhere with stolen credentials. The buyer and the unrelated cardholder can both be victims.
How do you identify triangulation fraud in payments?
Look for combinations of signals rather than one flag: several cards paying for deliveries to one address, a billing identity unrelated to the recipient, easy-to-resell products, shipping changes after checkout, and recipients who do not recognize your store. Confirm with your secure support process before holding or cancelling an order, because gift orders look similar.
How can merchants prevent triangulation fraud?
Review orders after checkout and before fulfillment, use 3D Secure 2 where your processor supports it, record confirmed cases separately so rules improve, and search marketplaces for copies of your product listings. Review customer impact so legitimate gifts and resellers are not blocked.
Does delivery defeat a triangulation chargeback?
Delivery does not independently establish cardholder authorization. A triangulation chargeback requires review of the actual payment evidence, applicable rules, and any eligible protection.
Is dropshipping the same as triangulation fraud?
No. Legitimate dropshipping uses an authorized commercial and payment arrangement. Triangulation fraud depends on unauthorized payment credentials being used to fund fulfillment.
How does triangulation fraud work in travel?
A fake online travel agency sells flights or hotel stays at a discount, then books them with stolen card details for the traveler. The traveler receives a valid booking while the cardholder discovers an unauthorized charge, so airlines, hotels, and booking platforms face the same dispute pattern as a retailer.
You can organize evidence and manage supported responses with Chargeflow’s automated chargeback recovery.
Chargebacks?
Dat is niet langer jouw probleem.
Haal 4x meer chargebacks terug en voorkom tot 90% van de inkomende betalingen, dankzij AI en een wereldwijd netwerk van 20.000 handelaren.
.png)
