GiftCardMall/MyGift Scams and How to Protect Your Balance

Why gift cards attract fraud

A gift card is a bearer instrument. Whoever holds the sixteen digits, the expiration date and the three-digit code can spend the balance, anywhere, immediately. There is no name attached, no password, no two-factor prompt and no identity check.

Compare that with a credit card, where a disputed charge can be reversed weeks later, or a bank transfer, which can sometimes be recalled. A gift card balance spent by a fraudster is usually gone within minutes and is extremely difficult to recover. That combination — instant, anonymous, irreversible — is precisely why gift cards are the payment method that scammers request more than any other.

Pattern 1 — fake balance-check websites

This is the scam most directly aimed at people searching for giftcardmall/mygift, and it works because of a quirk of how the portal is named.

The phrase written on card carriers is not a usable web address. The real portal lives at mygift.giftcardmall.com. Because the phrase looks like a URL but is not one, enormous numbers of people type it into a search box instead of an address bar — and that search results page is where fraudsters go fishing, with lookalike domains and paid advertisements.

The fake site is a near-perfect copy. It asks for the same three fields as the real one. You type them in, you get a plausible-looking balance or a soothing error, and within minutes someone on the other side of the world is spending your money online.

Pattern 2 — card draining at the rack

This one happens before you ever own the card.

A thief takes a handful of cards from a store display, opens the packaging carefully, records or photographs the card number and the security code, reseals the packaging — often with a replacement sticker — and returns the cards to the rack. The numbers are worthless while the cards sit there, because an unsold card holds no money.

Then the thief waits, checking the balance on an automated loop. The moment a shopper buys the card and the register activates it, the balance appears, and it is spent online within minutes. The victim discovers an empty card, often at the worst possible moment: a birthday, a holiday, a checkout queue.

• Inspect the packaging before you buy. Look for peeled or mismatched stickers, a scratched-off security panel, a torn or re-glued carrier, or a card that sits loosely in its sleeve.
• Take cards from the back of the rack. Tampered cards are usually returned to the front where they sell fastest.
• Prefer a card kept behind the counter where the store offers one.
• Check the balance the same day you buy or receive it. The recovery window for a drained card is measured in hours.
• Keep the receipt. Without proof of purchase, neither the issuer nor the store can usually help.

If you spot a tampered card on a rack, tell a member of staff. Stores generally want to know, and the rest of that batch is likely compromised too.

Pattern 3 — the “pay us in gift cards” demand

The oldest pattern and still the most damaging, because it targets fear rather than inattention. Someone contacts you with an urgent problem and gift cards are the only acceptable solution. The stories rotate; the structure never does.

The structural giveaway is always the same: urgency, secrecy, and a payment method that cannot be reversed. A real organisation will wait while you verify. A scammer cannot afford to.

Pattern 4 — texts, emails and calls about your card

These arrive unsolicited and reference a card you may genuinely own, which is what makes them land.

• “Your gift card has been locked. Verify now to restore access.”
• “Unusual activity detected on your card ending 4417. Confirm your details.”
• “Your balance is about to expire. Claim it here.”
• “Action required: complete registration to activate your card.”

Every one of these leads to a page that harvests card details. The defence is a single habit, and it costs nothing: never act on an unsolicited message about a card. Close it, then go to the official portal by typing the address, or call the number printed on the back of your own card. If the message was real, that route reaches the same place. If it was not, you have lost nothing.

Resale and giveaway scams

Two more worth knowing about:

Discounted card resale. Someone offers a $100 card for $60 on a marketplace or social platform. Either the card is already drained, or the balance is spent the moment you pay. Buy gift cards from the retailer, not from strangers.

Giveaway and survey pages. “Complete this survey to claim a free $500 gift card.” The survey harvests personal data, the reward never arrives, and the details are sold on. Legitimate promotions do not require your card number, your bank login or a fee.

The universal red flags

Any one of these is enough to walk away. Two together is a certainty.

• Gift cards as the required payment method. The single clearest signal of fraud there is.
• Urgency. “Within the hour”, “before the office closes”, “or you will be arrested”.
• Secrecy. Being told not to tell family, the bank or the cashier.
• A request to read codes aloud or photograph the back of a card.
• Unsolicited contact that you did not initiate.
• A fee to receive money — to unlock a balance, release a prize, or process a refund.
• A request for an SSN, bank login or password in connection with a gift card.

Protecting a card you already own

1. Check the balance the day you get it

   On the official portal or the automated line on the back of the card. Early detection is the whole game.

2. Keep the receipt and the carrier

   Until the balance is zero. These are the only documents that prove the card is yours.

3. Photograph the front and back

   Store the image somewhere private. If the card is lost, you still have the number to quote.

4. Never share the number

   Not by text, not by email, not on the phone, not in a photo posted anywhere. The number is the money.

5. Spend it reasonably soon

   An unused card is exposed to fees, loss and being forgotten. It is a payment instrument, not a savings account.

If you have already been scammed

Act immediately. Speed genuinely changes outcomes, and in a small number of cases a balance is recovered.

1. Call the number on the back of the card

   Report it as fraud. Ask whether the balance can be frozen and what the dispute process is. Write down the reference number and the time of the call.

2. Tell the retailer where you bought it

   Some retailers can assist with cards bought in their stores, particularly in draining cases. Bring the receipt.

3. File a report with the FTC

   At reportfraud.ftc.gov. It takes a few minutes and feeds the enforcement data that shuts these operations down.

4. File a police report

   With your local department. Some issuers and retailers require one before they will consider a claim.

5. Keep everything

   The card, the receipt, the carrier, screenshots of the messages, the website address, the phone number that called you, and notes of every conversation with dates and names.

Questions about gift card scams