Also called: Triangulation scam, Triangle scam
What triangulation fraud is
Triangulation fraud is an online scheme with three parties: a fake seller, a real shopper, and a legitimate merchant like your business. The shopper pays the fake seller. The seller uses stolen card details to order the product from your store and ships it to the shopper.
The shopper may receive the item and see no problem at first. The actual cardholder sees an unauthorized charge and disputes it. Delivery proves the goods arrived, but it does not prove that the cardholder authorized the purchase.
A delivered order can still be an unauthorized card purchase, so review suspicious orders before they leave your hands.
How the scheme works
The fraudster lists goods through a fake storefront, marketplace listing, or social shop, often at a discount. A shopper pays the fraudster, who then places a separate order with your store using stolen payment credentials. Your business fulfills a genuine-looking order, but the payment belongs to an innocent cardholder.
Two separate payments, one merchant loss
| Shopper pays fake seller | $220 |
|---|---|
| Fake seller orders from your store | $300 |
| Your exposure after dispute | Reversed sale, goods, shipping, fee |
Illustrative example. The shopper's payment to the fake seller and the stolen-card purchase from your store are separate transactions.
What it can cost your business
When the cardholder disputes the card-not-present transaction, the payment is reversed. You lose the sale proceeds and the shipped goods, and you can also face shipping costs and a dispute fee. The fee amount is set by your processing arrangement, not by the fraud scheme.
Visa and Mastercard cardholders generally have 120 calendar days to dispute, with outer limits up to 540 days for some delayed-delivery cases. Your response window is set by your processor and is often 20 to 30 days. For US merchants, Visa's VAMP Excessive threshold is 1.5% and at least 1,500 combined fraud reports and disputes in a month, effective April 1, 2026.
Warning signs before you ship
Look for clusters of signals, not one mismatch by itself. Examples include several cards shipping to one address in a short period, a billing identity that differs from the recipient, a sudden run of orders for one popular item, or a shipping change after checkout. Gifts and shared addresses are legitimate, so a single signal is not proof.
A $300 item sold by a fake seller for $220 illustrates the separate transactions: the shopper pays the seller $220, while your store charges the stolen card $300. If the cardholder disputes, your loss is tied to your own $300 sale and shipped inventory, not the shopper's separate $220 payment.
Reduce the risk before fulfillment
Review suspicious orders before shipment and compare the card, billing, shipping, device, and order-velocity signals together. Place a short hold on orders with multiple red flags, then verify the order through a secure process. Do not ask a buyer to provide another person's card details.
Use 3-D Secure where supported and eligible, and save the order, verification, and fulfillment records. Authentication can shift eligible fraud liability to the issuer, but delivery records alone do not establish authorization. Chargeback alerts can also give you a chance to stop fulfillment or refund before a formal dispute.
What you can actually change
- Review before shipping. Hold orders with several connected warning signs, such as repeated cards going to one address or a sudden burst of demand for one item. Verify the order before fulfillment.
- Use layered checks. Compare billing and shipping details with device and order-velocity signals. Use 3-D Secure for eligible orders and keep records of verification and fulfillment.
- Track disputes and reports. Monitor card-not-present disputes and fraud reports against your settled transaction volume. Visa's US VAMP Excessive threshold is 1.5% and at least 1,500 combined reports and disputes in a month, effective April 1, 2026.
- Keep a response file. Save the order details, customer communications, authentication results, and shipping records. Your processor-set dispute response window is often 20 to 30 days, so organize the evidence as soon as a dispute arrives.
Frequently asked questions
Who loses money in triangulation fraud?
The merchant that fulfills the stolen-card order loses the sale proceeds when the cardholder disputes, along with the shipped goods and related costs. The shopper's payment to the fake seller is a separate transaction, and the shopper may initially receive the item.
Does proof of delivery prevent a triangulation fraud chargeback?
No. Proof of delivery shows that the goods reached the shipping address. It does not establish that the cardholder authorized the purchase, which is the central issue in a stolen-card dispute.
How long after an order can the cardholder dispute it?
Visa and Mastercard rules generally give cardholders 120 calendar days from the transaction or expected delivery date. Some delayed-delivery cases have outer limits up to 540 days. Your response period is shorter, often 20 to 30 days as set by your processor.