How to Protect a Digital Gift Card From Holiday Scammers

Protect a digital gift card by buying it straight from the retailer that issues it, redeeming the code into the recipient's account the moment it arrives, and never sending the code or PIN to anyone who contacts you first. Those three habits close the openings scammers actually use during the holidays, because a gift card number plus its PIN is the entire credential — whoever holds both can spend the balance remotely in minutes. The pressure is seasonal but the fraud is not.

The Federal Trade Commission's Consumer Sentinel figures for 2024 record roughly 41,120 reports of fraud paid by gift or reload card, with about $212 million in reported losses, which makes this a mass-market payment channel for scammers rather than a rare problem.

Verification note: Program terms and availability can change. This page was checked against linked sources on November 13, 2026.

The one rule that stops most gift card scams

No legitimate business or government agency will ever require payment by gift card. The FTC states this plainly in its guidance on avoiding and reporting gift card scams, and it holds regardless of who the caller claims to be — a utility, a tax agency, a sheriff's office, a tech support line, or your own employer. The behaviour to watch for is specific: a caller who keeps you on the phone while you drive to a store, buy cards, and then reads the numbers off the back is running a scam.

The FTC's advice is to hang up. Staying on the line is the scam's mechanism, not a coincidence, because it stops you from pausing to check with anyone. Apple makes the same point about its own cards.

Apple states its gift cards can be used only for Apple products and services, so any demand to settle a bill, fee, tax, or a "boss's" request with them is fraudulent — see Apple's page on gift card scams. Apple also warns that once a scammer has the redemption code, the funds are usually spent before you can reach Apple Support or the police.

Treat the code and PIN as cash

A digital gift card has no physical protection, so the digits are the whole thing. The FTC's position is direct: never send the numbers, a photo of the card, or an e-gift code to someone who contacted you. There is no verification process that requires a stranger to read your code, and no refund department that needs it.

This changes how you should handle a code you receive or send. Screenshots sitting in a photo roll, codes forwarded in a group chat, and e-gift emails left unread in an inbox are all balances waiting to be spent by whoever reaches them first. Two demands made alongside a gift card request mark it as a scam outright.

Apple says it never asks anyone for an Apple Account password or a verification code, so a request for either beside a gift card ask is the tell. The same reasoning applies to any issuer: an account credential and a gift card code serve entirely different purposes, and nobody legitimate needs both.

Physical cards that carry a digital code

Many "digital" codes still start life on a rack card, and that is where tampering happens. In a December 2024 consumer alert, the FTC advises checking gift cards before you buy them: confirm the protective stickers are intact and unpeeled, confirm the PIN on the back is still covered, and report any damaged card to the store. Thieves scratch codes off in the aisle and drain the balance after you load it.

The FBI adds a packaging check in its guidance on fake barcodes on gift cards. Before buying: Some states have started pushing this upstream. Maryland now requires gift card sellers to use sealed packaging that shows evidence of tampering and conceals redemption codes, to post a fraud warning notice, and to train staff, according to the Maryland Attorney General's retailer guide.

Open-loop sellers had to comply by June 1, 2025 and closed-loop sellers by October 1, 2025.

• Skip any card whose packaging is ripped, wrinkled, bent, or otherwise tampered with
• Check that the barcode visible through the package window matches the number printed on the packaging
• Verify the balance both before and after purchase

Where you buy matters more than how you inspect

The FBI is explicit that inspection gives no guarantee a card is untampered, and recovery depends entirely on funds remaining. That limitation is the reason buying habits beat checking habits. The safest purchase is an e-gift card bought directly from the retailer's own website, where the code is generated for your order and never sits on a rack.

Resale marketplaces and third-party discount listings carry a risk a sealed-package check cannot address, because you have no view of where the code has been or how many people have seen it. After purchase, close the window scammers work in. Register or redeem the code into the recipient's own account immediately rather than letting it sit — an e-gift card attached to an account is far harder to spend from the outside than a loose code in an email.

What to do in the first hour after a loss

Speed is the only variable you control, since recovery depends on money still being on the card. Keep the receipt and the card number: those are what the issuer will ask for when you report. The scale explains why the pitch sounds so plausible.

Imposter scams — the category that drives most gift card payment demands — generated more than 1 million FTC reports and about $3.5 billion in reported losses in 2025, the ninth consecutive year they ranked first by report volume, according to the FTC's June 2026 announcement. The scripts are rehearsed on a very large number of people before they reach you.

• Call the card issuer's fraud line first and ask them to freeze the remaining balance
• Report to the FTC at the agency's gift card scam page
• For Apple cards, U.S. victims should call 800-275-2273 and say "gift cards," per Apple's own instructions
• Tell the retailer where you bought the card and hand over the receipt

Frequently Asked Questions

Can a scammer use a gift card code without the physical card?

Yes. The number and PIN together let anyone drain the balance remotely, which is why the FTC says never to send the digits, a photo of the card, or an e-gift code to someone who contacted you.

Is a discounted gift card from a resale listing safe?

It carries risk you cannot inspect away. The FBI notes that checking a card gives no guarantee it is untampered, so buying directly from the issuing retailer's own site is the stronger protection.

Someone claiming to be my employer asked me to buy gift cards for clients. Is that normal?

No. Apple specifically flags the "boss" request as a scam pattern, and the FTC's rule covers it: no legitimate business requires payment by gift card.

How soon should I redeem an e-gift card I was given?

Immediately. Redeeming the code into the recipient's account removes the loose credential that a thief would otherwise need only to copy.