Buy Now Pay Later Fraud
Fraudsters exploit buy now pay later services to make purchases with stolen identity data, leaving victims liable for debt they never incurred.
Last reviewed: 1 June 2026
What this scam is
Buy now pay later (BNPL) fraud occurs when a fraudster uses stolen or fabricated identity information to open a BNPL account and make purchases, leaving the real person to deal with the resulting debt, credit impact, and dispute process.
BNPL services — offered by providers such as Klarna, Afterpay, and Affirm — allow customers to split purchases into instalments with minimal upfront verification. Their speed and low barrier to approval make them attractive to fraudsters with basic identity data: a name, date of birth, address, and email address obtained through a data breach or phishing attack.
Victims typically discover the fraud only when they receive a debt collection notice, see an unexpected entry on their credit report, or receive a package they did not order. The dispute process can be lengthy and the credit impact can persist while the case is under investigation.
How it works
The fraudster obtains personal data through a data breach, phishing email, or data broker purchase. They use this data to create a BNPL account in the victim's name at an online retailer. The low verification requirements of many BNPL services allow approval with only basic identity information.
Goods are delivered to an address controlled by the fraudster — often a parcel drop service, a vacated rental property, or a reshipping mule address. The victim receives no notification until the first missed payment triggers a collection reminder to the real email or address on file.
Because the service was legitimately extended on the victim's identity, some BNPL providers initially treat the case as a missed-payment dispute rather than identity fraud. Victims must submit identity fraud claims and often provide significant documentation to clear the debt.
Why this scam works
BNPL services are designed for frictionless checkout. The minimal identity verification that makes them convenient for genuine customers also makes them accessible to fraudsters with basic data. Because the fraud does not require the victim's payment card — only their identity — standard card controls provide no protection.
Victims often do not discover the fraud for weeks or months, by which point multiple instalments may have been missed and the debt may have been passed to collections.
Common red flags
- Debt collection notice for a BNPL provider you have never used
- Credit report entry for a BNPL account you did not open
- Delivery notification for goods you did not order
- Email confirmation of a BNPL account or purchase you did not make
- Unexpected credit check inquiry from a BNPL provider
- Password reset email from a retailer whose BNPL checkout you have not used
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Payment reminder: [BNPL provider] — your instalment of [amount] for order [number] is due. Log in to manage your account.
Debt recovery notice: [BNPL provider] has referred an outstanding balance of [amount] to our collections team. Please contact us immediately.
Your [BNPL provider] account has been created. Your first order of [amount] is confirmed for delivery to [unknown address].
Common variations
- Ghost account fraud — BNPL account opened entirely with fabricated data not linked to a real person
- Account takeover variant — attacker accesses an existing retail account to add BNPL as a payment method
- Refund fraud — legitimate purchase made and then fraudulently returned for cash while BNPL instalment remains
How to verify before you act
Monitor your credit report regularly. Many credit reference agencies offer free alerts for new account openings. If you receive any BNPL communication for a purchase or account you do not recognise, treat it as potential fraud immediately — do not make any payment before the provider has confirmed whether an identity fraud claim is open. Contact the provider directly using their official website contact details, not any link or number in the notification.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Individuals whose personal data has been exposed in a breach
- People who shop with major retailers offering BNPL at checkout
- Young adults with thin credit files that may not flag unusual activity
What to do immediately
- Contact the BNPL provider immediately and report the account as fraudulently opened
- File an identity theft report with your national fraud authority
- Place a fraud alert or credit freeze with the major credit reference agencies
- Change passwords for any retail accounts that use the same email address
- Check your credit report for other accounts you did not open
- Keep a log of all communications with the BNPL provider and reference numbers
- Request written confirmation that the debt is under fraud investigation before making any payment
How to prevent it
- Monitor your credit report regularly and set up alerts for new account openings
- Use unique email addresses for retail accounts where possible
- Freeze your credit if you are not actively applying for new credit products
- Enable two-factor authentication on all retail accounts
- Check periodically which BNPL accounts are associated with your retail profiles
Evidence to preserve
- Debt collection notices received
- Screenshots of the fraudulent account if you can access it
- Your credit report showing the fraudulent entry
- Any delivery notifications for goods you did not order
- Your identity theft report reference number
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Am I liable for BNPL debt taken out in my name by a fraudster?
No. Once you report the account as fraudulently opened and file an identity theft report, the BNPL provider is obligated to investigate. You should not pay any instalment while the fraud investigation is open, and you should request written confirmation of the investigation status. In most jurisdictions, verified identity theft removes liability for the fraudulent debt.
Will this affect my credit score?
A fraudulent BNPL account may temporarily affect your credit report. Once you file an identity theft report and notify the credit reference agencies, they should place a fraud marker on the file and investigate the entries. Fraudulent entries can be removed from your report once the case is verified.