How to Identify Triangulation FraudFinding Signal in the Noise
“Red Flags” to Help Identify Triangulation Fraud
Arguably the most dangerous and insidious thing about triangulation fraud is how normal it looks, at least from the outset.
The shipping addresses are real, the credit cards used by the buyer on the scammer’s website valid, and the customers who unwittingly buy from the fraudster are genuine. So, as an eCommerce merchant, how do you know that you’re being targeted by a triangulation fraudster — especially since most of your orders are legitimate?
The key is to focus on subtle anomalies; digital cues that even the most cunning fraudsters can’t hide. In this article, I’ll discuss how you can snuff out triangulation fraud by looking for red flags. We’ll also take a look at platform-specific opportunities so that you know how to protect yourself if you sell on a third-party marketplace.
Triangulation Fraud
In a triangulation scam, a fraudster sets up a fake eCommerce store, attracts real buyers, and uses stolen payment details to dropship an item from a real store. This guide explains how triangulation fraud works, the financial impact of this threat, prevention best practices, and more.
Identifying Triangulation Fraud
Review purchase patterns for signs of triangulation fraud. Repeated transactions involving identical items coming from a single payment method can be a telltale sign of bad activity. New customer profiles, low-value transactions, conflicting billing and shipping address information, and high transaction velocity can also be red flags.
If you suspect you’ve been targeted for a triangulation scheme, the first step should be to review your analytics.
You want to look for those items which fraudsters seem to purchase repeatedly. These scammers involved are probably running a specialty operation, so they’re typically buying the same item (or items) over and over. Cosmetics, for instance, are a common target for triangulation fraud.
If you identify problematic items, you can refine your fraud scoring rules and set a lower threshold for these goods.
You can also look at the payment method used. Are all the sketchy transactions coming from a specific banking identification number? Are they all using the same payment method? This can be a sign of fraudulent activity, too.
Another tactic you can employ if you suspect abuse is to put risky purchasers through additional checks. For example, you can charge two micropayments to the account in question and ask the buyer to verify the amounts.
Save time. Recover revenue. Prevent chargebacks.
Request a Demo
Other “Red Flags” for Triangulation Fraud
I outlined a few general fraud tips above. But, I also wanted to give you some specific, recognizable fraud indicators to watch for, too.
Below are a few common warning signs associated with a triangulation attack:
-
New Customers:
A new account that suddenly starts buying the same items on a regular basis. -
Conflicting Addresses:
The buyer’s billing and shipping information are different. -
Low Dollar-Value Transactions:
Triangulation fraudsters typically focus on commonplace items not usually targeted by fraudsters. -
Transaction Velocity:
Triangulation attacks are usually committed by small groups operating repeatedly from a few devices.
Look beyond individual transactions and try leveraging historical data to map out and link common and recurring points. This kind of comprehensive trend and link analysis can expose common attributes in a lot of triangulation fraud. Although time-consuming and labor-intensive, this is critical work: analyzing data like this lets you generate better data over time. That will make for more informed and intelligent decisioning.
Which Marketplaces Are Most Vulnerable?
While triangulation fraud can happen on any eCommerce platform, some third-party marketplaces have characteristics that make them more vulnerable to triangulation fraud. Established marketplaces with high user trust, large product catalogs, and enforcement gaps that can be exploited for profit are especially prone to triangulation fraud.
eBay
eBay is one platform that checks all three boxes. Despite the rollout of managed payments, and the platform’s centralized and integrated payments system, eBay remains a hunting ground for triangulation scammers.
One vulnerability stems from the platform’s inconsistent enforcement of its dropshipping policy. While eBay explicitly prohibits purchasing items from another retailer and having them shipped directly to your customer, the sheer volume of listings on the platform makes manual oversight effectively impossible.
Fraudsters exploit this by operating until they are caught, often cycling through multiple accounts that appear unrelated. By the time one account is flagged for policy violations, the fraudster has often already moved on to the next, leaving the merchant to deal with the chargebacks.
Amazon
As the world’s largest marketplace, Amazon’s sheer size — including the complexity of its third-party seller ecosystem — is perfect cover for triangulation fraudsters.
An easy way for fraudsters to fly under the radar is to set up shop as an international seller, a designation that trains buyers to expect longer, two- to three-week shipping times. This buffer gives the fraudster ample time to execute the scheme and withdraw funds before the goods even arrive (or fail to arrive).
Amazon’s pro-buyer A-to-Z Guarantee can also be weaponized for harm. Fraudsters know that if a buyer complains about a non-delivery or a suspicious package, Amazon has a tendency to refund the buyer from the seller’s funds without a thorough investigation. This effectively forces the legitimate merchant to subsidize the scam twice.
Facebook & Instagram
Platforms like Facebook Marketplace and Instagram Shopping allow virtually any business or individual to set up shop. Triangulation fraudsters are aware of these significantly lower barriers to entry and use it to their advantage by setting up fake accounts with ease.
Fraudsters also benefit from the informal nature of these platforms. On Facebook and Instagram, buyers are accustomed to peer-to-peer transactions and are less likely to scrutinize a seller’s credentials. And, because these platforms are social networks first and marketplaces second, their fraud detection tools may be less mature than those of dedicated marketplaces like eBay or Amazon.
Amazon’s pro-buyer A-to-Z Guarantee can also be weaponized for harm. Fraudsters know that if a buyer complains about a non-delivery or a suspicious package, Amazon has a tendency to refund the buyer from the seller’s funds without a thorough investigation. This effectively forces the legitimate merchant to subsidize the scam twice.
