Triangulation Fraud: What It Is and Why Your Store Is the Victim
Quick answer
Triangulation fraud occurs when a scammer sells goods they don't own on a marketplace, fulfills orders using stolen credit cards, and your store ships the product. You lose the item, the revenue, and pay a chargeback fee — all while the real buyer received exactly what they ordered. It accounts for ~26% of all eCommerce fraud and costs merchants $1 billion per month globally.
Unlike most fraud where someone steals from you directly, triangulation fraud makes your store the unwitting fulfilment centre for a criminal operation. The buyer is innocent. The cardholder is a victim. And you bear the financial loss — for a transaction you processed in complete good faith.
How Triangulation Fraud Works
The name comes from the three parties involved in every triangulation scheme. Here is the full sequence:
Step 1 — Scammer lists your products
Posts your SKUs on eBay / Amazon at 20–30% below your price. "Sells" products they do not own or stock.
Step 2 — Real buyer pays the scammer
Legitimate customer pays scammer's listing price. Scammer collects real money.
Step 3 — Scammer orders from your store with a stolen card
Uses a stolen/compromised card to purchase the same item from your store. Ships to the buyer's address.
Step 4 — Your store ships the goods
You process the order normally. Item arrives at the buyer. Buyer is satisfied.
Step 5 — Real cardholder disputes
The person whose card was stolen notices an unfamiliar charge. Files a dispute with their bank. Chargeback lands on you.
Scammer's profit
Buyer paid $70. Your item cost $100. Scammer pockets $70, your store loses $100 + chargeback fee.
The FTC reports a 35% surge in triangulation fraud since 2023. At $1 billion per month globally, it represents approximately 26% of all eCommerce fraud. The total loss per $1 of fraud (including product, fees, and operational cost) reaches $4.61.
What Happens to Your Store
Here is the exact sequence from your store's perspective:
Order placed with stolen card
Passes all standard checks — the card is real, the billing address often partially matches (scammers use partial AVS match cards), the email looks legitimate.
You ship the product
Order processes normally. You fulfil in good faith. Tracking confirms delivery to the address provided.
Real cardholder discovers the charge
The legitimate cardholder — who never ordered anything from you — sees an unfamiliar charge. Calls their bank.
You receive a chargeback
Reason code: fraud (10.4 on Visa, 4853/4863 on Mastercard). The chargeback is 100% valid — the cardholder's card was used without consent.
You lose product AND revenue
The item has been delivered to the scammer's buyer. You cannot reclaim it. The chargeback reverses the transaction. You also pay a $15–40 chargeback fee.
Warning Signs to Watch For
No single signal is definitive, but patterns across multiple orders should trigger manual review:
⚑ Your products listed cheaper on eBay or Amazon
Search your exact product names on major marketplaces. If someone is selling your SKUs at 20–40% below your price, they may be running a triangulation operation using your store.
⚑ Multiple orders to the same shipping address, different cards
The scammer is fulfilling multiple marketplace orders. Same delivery address, different payment methods signals automated bulk fraud.
⚑ Billing address ≠ shipping address (different state or country)
The scammer's billing address (stolen card) rarely matches the buyer's shipping address. AVS partial match combined with different-state shipping is a key signal.
⚑ New account, high-value order, expedited shipping
Scammers need fast delivery to satisfy the marketplace buyer. A brand-new account requesting overnight or 2-day shipping on a $300+ item warrants review.
⚑ Rush orders for your bestselling SKUs
Triangulation targets your most-listed, easily-searchable products. Repeated new-account orders for the same 2–3 items is a pattern to flag.
Why You Almost Always Lose These Chargebacks
The core problem: the cardholder's dispute is completely legitimate.
Why standard evidence doesn't work
Your shipping confirmation and delivery proof show that something was delivered to some address — but the cardholder never ordered it. They are not the person who received the package. Delivery proof addresses the wrong question.
The standard chargeback defence arguments — "item was delivered", "customer received the goods" — don't apply here because:
- The cardholder never ordered from you — you cannot argue they received what they ordered
- The delivery address belongs to a third party (the marketplace buyer), not the cardholder
- The card was genuinely used without consent — the underlying claim is valid
- You are simultaneously a victim (of the stolen card) and the party that must absorb the loss
Card networks do not have a mechanism to compensate you for being the fulfilment partner in someone else's fraud. You bear the loss because you processed the stolen card transaction.
How to Reduce Triangulation Fraud Losses
Prevention is the only meaningful lever — these chargebacks are not winnable, so the goal is not to take the transaction in the first place.
Velocity checks: same shipping address, multiple cards
Flag any shipping address that appears in more than 2 orders within 30 days using different payment methods. This is the clearest pattern signature of triangulation.
AVS mismatch rules
Decline or manually review orders where AVS returns a partial match (street matches, zip does not) combined with a shipping address in a different state from the billing zip.
IP address vs billing address mismatch
The scammer is often located in a different country from both the stolen card and the shipping address. IP geolocation that doesn't match either address is a strong risk signal.
Device fingerprinting across sessions
The same device placing orders with different cards, different email addresses, and different shipping addresses over time is a near-certain triangulation indicator.
Manual review: new account + high value + expedited
Create a rule that routes to manual review any order combining: account age < 7 days, order value > $150, and expedited shipping selected. This combination has the highest triangulation hit rate.
What Evidence Helps (Even If You'll Lose)
Even though triangulation chargebacks are almost never won, gathering and submitting evidence serves two purposes: demonstrating good-faith fulfilment to your acquirer and potentially building a case for pre-arbitration on repeat patterns.
| Evidence type | What it shows | Likely impact |
|---|---|---|
| Shipping confirmation + carrier tracking | Item was delivered to the address provided at checkout | Minimal — cardholder didn't place the order |
| Device fingerprint at order time | The device used to order has a fraud pattern (multiple cards, addresses) | Supports a pattern narrative, rarely reverses outcome |
| IP address + geolocation logs | Order originated from a different country than both card and shipping | Useful for acquirer fraud reporting, not chargeback reversal |
| Screenshot of your product on eBay/Amazon | Your SKU is being resold — links this order to a triangulation ring | Strongest contextual evidence; helps escalate to network fraud team |
If you identify a triangulation ring targeting your store, report it to your payment processor and to the IC3 (Internet Crime Complaint Center). Networks do have fraud investigation teams who can take action at the ring level — which prevents future attacks even if it doesn't recover current losses.
Frequently Asked Questions
What is triangulation fraud in eCommerce?+
How do I know if my store was used in a triangulation scam?+
Can I win a chargeback caused by triangulation fraud?+
Which products are most targeted by triangulation fraud?+
How does triangulation fraud affect my chargeback ratio?+
When triangulation chargebacks hit — ChargeMate builds your evidence package and fights every case worth fighting.
$10/case. No monthly fees. Only pay when we work a dispute.
See outsourcing plans →