How does triangulation fraud work in online shopping?
Triangulation fraud places victims between a fake online shop and a real retailer: you pay the fraudster, they buy the product for you with a stolen card, and the cardholder disputes the charge — leaving you with a potential fraud investigation.
Last reviewed: 10 June 2026
Explanation
The scam involves three parties: the fraudster, the victim (buyer), and a legitimate retailer. The fraudster sets up a convincing online storefront selling popular items at slightly-below-market prices. When a genuine shopper places an order and pays, the fraudster uses stolen credit card details to purchase the same product from a real retailer and ships it to the buyer's address.
From the victim's perspective the transaction seems to work: they receive a real product. What they do not know is that their address is now associated with a fraudulent purchase. When the legitimate cardholder discovers the unauthorised charge and disputes it, the retailer and card network investigate. The victim's address appears in the fraud trail and may trigger an account suspension, a chargeback on their own payment, or in rare cases a law-enforcement inquiry.
The fraudster profits from the difference between what the victim paid and the cost of the stolen-card purchase, plus the goods themselves if items are re-ordered to a different address. Some operations also harvest the victim's card details if they paid for additional items or subscriptions on the fraudulent storefront.
Triangulation fraud is difficult for consumers to detect immediately because the product does arrive. Signs often only emerge later when the credit-card statement of the original cardholder surfaces or the retailer contacts the shipping address.
Common red flags
- An online shop has prices noticeably below every other retailer
- The shop has minimal contact information, no physical address, and poor return policies
- The package arrives from an unrelated retailer, not the shop you ordered from
- Your shipping confirmation email comes from Amazon, Walmart, or another retailer you did not use
- You later receive a chargeback or account-suspension notice related to the delivery address
What to do now
- If you receive goods unexpectedly from a retailer you did not order from, do not ignore it — document everything
- Contact your payment provider if you believe the shop that charged you was fraudulent
- Report the fraudulent storefront to your national consumer protection agency
- If contacted by the real retailer about a fraud investigation, cooperate fully and share all order details
- Check your own card statements for any unexpected charges from the storefront
- Use credit cards rather than debit cards for online purchases — chargebacks are easier
Frequently asked questions
Am I responsible for the fraud if a stolen card was used to ship to me?
Generally no — you are an unwitting recipient. Cooperating with the retailer's investigation and showing your original order from the fraudulent shop demonstrates good faith.
How do fraudsters get so many stolen card numbers?
Through data breaches, phishing, card-skimming devices, and dark-web marketplaces that sell batches of compromised card details.
Is triangulation fraud the same as dropshipping?
Legitimate dropshipping uses authorised supplier accounts. Triangulation fraud uses stolen payment details and is illegal regardless of whether the buyer receives a product.