Reshipping Scams: How Merchants Unknowingly Ship Stolen Goods
Quick answer
Reshipping fraud involves criminals recruiting unwitting "warehouse employees" or "work-from-home" workers to receive and reship packages bought with stolen cards. Your store ships to the unwitting middleman, the real cardholder disputes, and you lose the goods, the revenue, and pay a chargeback fee. The "employee" is also a victim — they may face criminal investigation for receiving stolen goods.
Reshipping fraud is unique because everyone in the chain — except the criminal — is a victim. The cardholder had their card stolen. The recruited mule thought they had a legitimate job. Your store shipped a real order. The criminal is the only one who profits, and they are rarely the one who ends up being investigated first.
How Reshipping Scams Work — Your Store's Involuntary Role
The reshipping fraud cycle is methodical. Here is what happens step by step, and where your store fits into it:
- Scammer recruits a "warehouse coordinator" via a fake job listing — typically on job boards like Indeed or ZipRecruiter. The job pays well and requires no experience.
- The recruited "employee" provides their home address for package deliveries, believing they are handling inventory redistribution for a legitimate company.
- Scammer buys high-value goods from your store using stolen card details, shipping to the "employee"'s address. Your fraud checks see a real US address, a card that passes AVS, and a plausible order.
- The "employee" receives the package and follows their "employer's" instructions — removing outer packaging, relabeling, and shipping to a final destination (often overseas).
- The real cardholder notices the charge and disputes it with their bank. The dispute is 100% legitimate — their card was stolen.
- Your store receives the chargeback. You lost the goods, you lost the revenue, and you pay the dispute fee.
The scammer is typically based overseas and is rarely apprehended. The mule faces investigation. You face the financial loss.
The Fake Job Ads That Enable This
An estimated 65% of fake job offers involve reshipping positions. They are typically titled "warehouse distribution coordinator," "logistics assistant," "package manager," or "quality control inspector." These listings look professionally written and are often accompanied by fake company websites.
Common red flags in reshipping job ads
- Pay in gift cards or cryptocurrency — no legitimate employer pays via gift card
- No interview required — hired immediately after submitting an application
- Work entirely from home — all communication is online or via messaging app
- Job involves receiving packages and forwarding them — sometimes euphemized as "quality checking"
- Contact only via Telegram or WhatsApp — no official email or phone
- Upfront requests for home address before any contract is signed
The reason this matters to merchants: understanding how mules are recruited helps you understand why the shipping address looks legitimate. These are real US addresses belonging to real people — your standard address verification will not flag them.
Red Flags in Your Orders
While individual signals are weak, a combination of these factors should trigger manual review or automatic decline on high-value orders:
Rush or overnight shipping on a first order
Reshipping operations need goods delivered quickly before the stolen card is flagged. Expedited shipping selected at checkout on a brand-new account is a significant signal, especially for high-value items.
High-value electronics, luxury goods, or gift cards
These product categories are the primary targets. Electronics have high resale value, luxury goods are liquid on secondary markets, and gift cards are essentially untraceable cash equivalents.
Residential address for what appears to be a business order
Large orders for bulk quantities shipped to a residential address. Or an order with a business name in the billing details but a different residential address for shipping.
Billing/shipping mismatch with new account
The billing address belongs to the stolen card's real owner. The shipping address is the mule's home. A mismatch on a new account ordering high-value goods is a high-risk combination.
Multiple orders to same address with different cards
If you see two or more orders shipped to the same residential address but charged to different card numbers, that address is almost certainly a mule address. Flag all associated orders.
Expedited shipping to address with prior chargebacks
Cross-reference shipping addresses against your historical chargeback records. Mule addresses are reused across multiple fraud operations.
Why Reshipping Chargebacks Are Nearly Unwinnable
Unlike friendly fraud — where you can argue the cardholder received the goods — reshipping chargebacks are structurally difficult to win:
- The real cardholder's claim is 100% legitimate. Their card was stolen and used without their knowledge. No representment argument challenges the legitimacy of their dispute.
- You shipped to a real address, but that doesn't help. The dispute is about unauthorized card use, not failed delivery. Delivery confirmation to the mule's address does not help your case with the issuing bank.
- Unlike triangulation fraud, you cannot claim the buyer received the goods. From the cardholder's perspective, they never ordered anything from you. From the mule's perspective, they received a package in the course of what they believed was legitimate employment.
- Chargeback reason codes favor the cardholder. The dispute will typically be filed under "unauthorized transaction" — the strongest category for cardholders and the hardest for merchants to challenge.
Best practice: provide full delivery documentation to your acquirer — not to win the chargeback, but to help limit your acquirer's risk exposure assessment. Documenting the fraud pattern also helps your acquirer's fraud team identify network-wide patterns.
How to Protect Your Store
Prevention is your only effective tool against reshipping fraud. These controls, layered together, significantly reduce exposure:
| Control | What it catches | Limitation |
|---|---|---|
| IP vs billing country check | Orders placed from overseas IPs using US billing addresses | VPNs can mask IP location |
| AVS full match required | Cards where billing address doesn't match (partial AVS match) | Mules provide their real address; stolen card owner's address passes AVS |
| Velocity: multiple cards → same address | Mule addresses receiving orders from multiple stolen cards | Requires historical data; first order won't be caught |
| New account + expedited shipping + high value = review flag | Rush reshipping orders on new accounts | Increases manual review workload |
| Phone verification for orders over $200 | Fake accounts with unverified contact information | Mules have real phones; does not catch all cases |
| Fraud database address check | Known mule addresses flagged by industry fraud consortia | Only catches addresses already in the database |
No single control catches all reshipping fraud. The combination of velocity rules, IP/country matching, and shipping address history analysis is most effective for high-volume merchants. For smaller stores, manual review on high-value first orders is a practical approach.
What Happens to the "Employees"
The recruited mules are themselves victims of the fraud — but that does not protect them from legal consequences:
- They receive packages of stolen goods, often believing they are a legitimate warehouse or logistics employee.
- They may face investigation for receiving stolen property — a federal crime in the US, regardless of intent. Prosecutors often must prove intent, but the investigation itself is a serious burden.
- The FBI has prosecuted reshipping mules alongside the criminal networks that recruited them. "I didn't know" is a defense, but not always a complete one.
- What this means for merchants: Document everything if law enforcement contacts you. You are a victim. Your order records, IP logs, and chargeback documentation help prosecutors trace the network and build cases against the actual organizers.
Cooperation with law enforcement investigations is important — and it typically comes at no cost to you as a merchant. File at IC3.gov for federal cases, and contact your local FBI field office if the fraud volume is significant.
Frequently Asked Questions
What is reshipping fraud?+
How do I know if my store was targeted by a reshipping scam?+
Can I win a chargeback from reshipping fraud?+
What high-value products are most targeted by reshipping scams?+
Should I report reshipping fraud to law enforcement?+
Every reshipping chargeback counts toward your ratio. ChargeMate documents each case and helps manage your overall dispute exposure. $10/case.
See outsourcing plans →