The rapid adoption of digital payment systems has given cybercriminals new opportunities for sophisticated financial fraud, and US investigators say organised Chinese fraud networks are now exploiting exactly that shift. Using stolen credit card information, tap-to-pay technology and compromised digital wallets, these networks purchase gift cards using stolen payment credentials, then resell them at discounted prices or redeem them for high-value merchandise exported and resold overseas. Police estimate the schemes generate as much as $1 billion, roughly ₹8,600 crore, in illicit profits every year.
A Seven-Minute Transaction That Exposed a Global Network
Adam Parks, an assistant special agent in charge with US Homeland Security Investigations, described a case that illustrates how ordinary the fraud can look in the moment. At a Lowe’s in Hammond, Louisiana, a suspect walked up to a self-checkout kiosk and, over roughly seven minutes, methodically rang up multiple $95 gift cards, tapping his phone to pay for each one while an associate circled nearby. Surveillance footage showed nothing unusual, an ordinary customer buying gift cards, until investigators determined he was part of a sprawling Chinese crime ring, using stolen credit cards loaded onto his phone while a Southeast Asian scam compound coached him through each transaction via wireless earbuds.
Parks said the same suspect left that Lowe’s and purchased more gift cards using stolen credit card information at other retailers, before returning to the original store that same day to repeat the process. He was not arrested and remains a suspect, illustrating how difficult these transactions are to flag and act on in real time, since each individual purchase looks entirely legitimate on its own.
From Emptying Shelves to Draining Digital Wallets
Investigators describe this as a fundamental shift from traditional retail theft. Rather than stealing merchandise directly from stores, criminals load stolen or compromised credit card details onto smartphones and mobile wallets, then use tap-to-pay to buy large quantities of gift cards, later sold online at a discount or redeemed for expensive electronics, tools and other goods exported and resold in foreign markets, primarily China. The US Department of Homeland Security has launched a dedicated task force, Project Red Hook, named for the perpetrators’ ties to China and their exploitation of gift cards hung on store display hooks, marking the first time federal authorities have specifically targeted Chinese organised crime’s role in gift card fraud.
The underlying technique, sometimes called “ghost-tapping,” relies on relaying stolen card data between devices using NFC-capturing software, allowing a criminal’s phone to effectively impersonate a legitimate contactless card at checkout. Security researchers have linked the broader ecosystem enabling this fraud to the same Chinese-speaking criminal networks behind unlicensed money lending, online gambling operations and romance scams, with federal investigators believing the gift card proceeds help fund other illicit activities, including narcotics trafficking and human trafficking.
Local Operatives, International Coordination
Investigators say the networks operate across multiple US states and have targeted major retail chains including Lowe’s and TJX Companies, with the individuals conducting in-store purchases typically acting as local operatives while the broader scheme is coordinated and financed by international organised crime groups providing technical expertise and logistical support. One earlier related case saw three Chinese nationals plead guilty to running a scheme that used stolen gift cards to buy roughly $100 million worth of electronics, stockpiled in a New Hampshire warehouse before being shipped to China and Hong Kong, with investigators recovering $8 million in Apple products, thousands of gift cards and thousands more in counterfeit devices from that single operation.
Cybersecurity experts warn that while digital wallets and contactless payments have significantly improved convenience, they have also created new blind spots for fraud detection, since transactions completed without a physical card being presented are harder for traditional retail security systems to flag as suspicious. Gift cards remain a preferred target specifically because they function much like cash, transfer instantly, and become difficult to trace once redeemed or resold.
Prof. Triveni Singh, the former IPS officer and cybercrime specialist, said digital payment fraud has become a key component of global organised cybercrime, with criminal groups increasingly combining stolen financial data, compromised digital wallets and advanced social engineering into multi-layered operations. He said banks, payment providers and retailers must strengthen real-time fraud detection, behavioural analytics and multi-factor authentication to counter these evolving threats. Cybersecurity specialists further advise consumers to monitor bank accounts and card transactions regularly, enable transaction alerts, and verify any request to add a payment card to a digital wallet, since combating internationally coordinated cybercrime of this scale ultimately requires close cooperation among law enforcement, financial institutions and cybersecurity organisations across multiple jurisdictions.
