Triangulation fraud: how dropshippers use stolen cards on your Shopify store

Triangulation fraud is a three-party scam. A fraudster lists your products cheaply on a fake store or a marketplace, takes a real shopper's payment, then orders the item from your store with a stolen card and ships it to that shopper. The shopper is happy, the fraudster keeps their money, and you get the chargeback when the card's owner disputes it.

How it works

1A fraudster lists your product below your price on a marketplace or a fake storefront
2A real shopper buys it there and pays the fraudster
3The fraudster orders the same item from your store with a stolen card, shipping to the real shopper's address
4You ship, the shopper receives a genuine product, and weeks later the stolen card's owner files a chargeback against you

Warning signs

The cardholder's name doesn't match the person the order ships to
One email or phone number placing orders that ship to many unrelated people
Shopify's fraud analysis marks the order high risk
Your products listed online far below what they could be bought for legitimately
A customer contacts you about an order they believe they bought somewhere else

How to prevent it on Shopify

Things any merchant can do, with or without an app.

Compare the billing name with the shipping name on high-value orders, and contact the buyer when they don't match
Search for your products listed well below your price, and report those listings
Turn on 3D Secure and your payment provider's address checks
When you find one triangulation order, search your orders for the same email or phone number

AI-powered fraud detection

What Interceptor does about it

Holds orders Shopify rates high risk, so they wait for your review instead of shipping
Once you mark one order fraud, every future order with the same email, name or address is flagged, which matters here because fraudsters often reuse one email across many orders
AI look-alike checks catch the fraudster's slightly changed emails and names
Flags addresses where several different cards are shipping

What it doesn't do: Interceptor can't see the fake storefront or marketplace listing, and it doesn't compare billing and shipping names. Because each order ships to a different real shopper, address checks rarely fire, so the first order is usually caught only if Shopify rates it high risk. After you mark one, repeats are flagged.

Questions

What is triangulation fraud in ecommerce?

It's a scheme where a fraudster sells your product to a real shopper, then buys it from you with a stolen card and ships it straight to that shopper. You end up with the chargeback, and the shopper never knows they were part of a fraud.

Is the person receiving the order a fraudster?

Usually not. The recipient is often a real shopper who paid the fraudster. That's why you should contact them carefully rather than accuse them; they may help you find the listing they bought from.

Why is triangulation fraud hard to catch?

The shipping address is real, the recipient is real, and the item is delivered, so nothing looks wrong at first. The tell-tale signs are a cardholder who doesn't match the recipient and one buyer identity shipping to many different people.