Chinese organized crime networks are increasingly exploiting tap-to-pay technology, digital wallets, and retail shopping applications to steal billions of dollars from banks and retailers in the United States, according to law enforcement agencies. Investigators say these highly organized fraud rings have shifted from traditional shoplifting to sophisticated digital payment fraud, allowing criminals to operate with lower risk while generating enormous illicit profits.
According to investigators from the U.S. Homeland Security Investigations (HSI), the networks use stolen credit card information to purchase gift cards and high-value consumer products, which are later resold or shipped overseas. Officials estimate that these organized groups collectively generate up to $1 billion annually through such operations.
One investigation in Louisiana revealed how a suspect repeatedly used tap-to-pay at self-checkout kiosks to purchase gift cards using stolen credit card credentials stored in a digital wallet. Investigators allege the suspect was guided remotely through wireless earpieces by operators working from a Southeast Asian scam compound. After purchasing gift cards from one store, the suspect allegedly repeated the same activity at multiple retail outlets before returning to the original location.
Authorities say the fraud typically begins with phishing campaigns involving fake text messages claiming unpaid toll charges, expired vehicle registrations, or pending legal action. Victims are tricked into revealing their credit card details, email credentials, or one-time passwords. Criminals then add the stolen payment cards to digital wallets under their control and use tap-to-pay technology to make purchases without possessing the physical cards.
Investigators also report a growing trend of retail app fraud, where cybercriminals compromise customer accounts containing saved payment cards and personal information. Credentials obtained through phishing, previous data breaches, or social engineering are reportedly traded on encrypted messaging platforms before being used to conduct fraudulent transactions.
According to cybersecurity specialists, many retail applications prioritize convenience and faster transactions over bank-grade authentication, making them attractive targets for organized cybercriminals. Once attackers gain access to customer accounts, they can purchase merchandise or gift cards using stored payment methods without immediately alerting victims.
Law enforcement agencies say Chinese criminal organizations use these fraudulent purchases to move illicit proceeds into legitimate commerce. Gift cards are redeemed to buy premium products, including smartphones and electronics, which are then exported and resold overseas, helping bypass financial restrictions and conceal the origin of stolen funds.
Investigators have also uncovered mobile applications disguised as anime or gaming software that secretly store stolen payment card information. During forensic examinations of seized devices, officers reportedly discovered that suspects concealed payment credentials within applications designed to resemble harmless mobile games, making detection more difficult.
Since early 2024, Project Red Hook, a nationwide initiative led by Homeland Security Investigations, has resulted in more than 239 arrests linked to gift card fraud and organized retail cybercrime. Authorities say investigations continue to target major international criminal organizations involved in digital payment fraud, money laundering, and identity theft.
Cybersecurity researchers warn that the increasing adoption of contactless payments, mobile wallets, and AI-assisted phishing campaigns is expanding the attack surface for financial fraud. They advise consumers to enable multi-factor authentication, regularly review banking and retail account activity, avoid responding to unsolicited payment-related messages, and immediately report suspicious transactions to financial institutions. Retailers are also being urged to strengthen authentication systems, deploy real-time fraud detection, and implement stronger identity verification to reduce the risk of large-scale digital payment fraud.
