Gift Cards, Wires, and Crypto ATMs: The Payments Scammers Ask For
The story can be flawless, but the payment request cannot be faked. Why criminals ask for gift cards, wires, and crypto, and which methods actually protect you.
- prevention
- payments
- scam recognition
- fundamentals
A scammer can fake almost everything. Caller ID, a company logo, a website, a badge number, a voice, a bank statement, a job title. Faking is cheap.
There is one part of the operation that cannot be faked: at the end, value has to leave you and reach them in a form they can keep. That constraint is narrow, and it is why payment method is the most reliable single indicator in fraud.
If you learn nothing else, learn this: judge the request, not the story.
What criminals need from a payment method
Three properties, in order of importance:
- Irreversibility. Once sent, no one can pull it back. Card networks and banks have dispute mechanisms; cash-equivalent transfers largely do not.
- Speed. Value has to move before anyone talks you out of it or a bank flags it.
- Anonymity. The receiving end should not be traceable to a person with a court-serviceable address.
Ordinary commerce does not need any of these. The methods below score high on all three, which is exactly why they show up.
The methods, and what makes them attractive
Gift cards
The most common request in consumer fraud, and the clearest signal on this list. The scammer asks you to buy retail gift cards, then read the numbers from the back over the phone. The moment those digits are spoken, the balance is drained, often within minutes, and there is no account holder to reverse.
The rule has no exceptions worth remembering: no legitimate business or government agency accepts payment in gift cards. Not the IRS. Not a utility company. Not bail. Not a fine, a fee, a tax, or an antivirus subscription. A gift card buys a gift.
If a store employee asks why you are buying six $500 cards, they are not being nosy. Retailers train staff to intervene because it is one of the last chances to stop the loss. Answer honestly.
Wire transfers
Bank wires settle fast and are difficult to recall once processed. They are legitimate for closings and large purchases, which is precisely why real estate wire fraud is so damaging: a criminal who has read a title company's email sends revised "wiring instructions" days before closing.
If you must wire money, verify the account details by calling the recipient at a number you already had, never one from the email carrying the instructions. If you sent a wire in error, call your bank immediately and ask them to attempt a recall. The window is short, sometimes hours, so speed beats deliberation.
Cryptocurrency and crypto ATMs
Crypto transactions are irreversible by design and settle without an intermediary who can intervene. A scam that starts on the phone frequently ends at a cryptocurrency ATM in a convenience store, where the victim feeds cash into a machine and scans a QR code the caller supplies.
Two specific patterns to know:
- A QR code someone else provides is a wallet address you cannot read. You are trusting an image.
- The "protect your money in a federal wallet" script, in which a supposed agent tells you your accounts are compromised and directs you to convert savings to crypto for safekeeping. No agency does this.
Payment apps sent to strangers
Zelle, Venmo, Cash App, and similar services are designed to work like handing over cash between people who already trust each other. Transfers are near-instant and generally not reversible, and sending to a criminal is usually treated as an authorized transfer rather than fraud, which limits your recourse.
Use them for people you know personally. For everything else, use a card.
Cash by courier or mail
Increasingly common: a "courier" arrives to collect cash, jewelry, or gold, sometimes with a passphrase to sound official. Or cash is shipped in a package disguised as something else. There is no institution on earth that sends someone to your door for cash. This request is the scam, full stop.
Two questions that settle it
When a payment request arrives, before evaluating anything about the story:
Would this organization actually accept this? A federal agency that cannot accept a gift card does not become able to on a Tuesday afternoon. A utility with an online bill pay system does not require crypto. If the method is impossible for the institution, the caller is not the institution.
If this is wrong, can I undo it? Answer honestly. Card charge: usually yes. Bank transfer to a stranger: usually no. Gift card codes read aloud: never. The less reversible the method, the more verification it deserves, and the more suspicious an urgent request for it becomes.
What to use instead
For any transaction with someone you do not know personally:
- Credit cards carry the strongest consumer protections. Under federal law you can dispute billing errors and unauthorized charges, and the card issuer stands between you and the merchant.
- Debit cards offer weaker protection and pull directly from your account, so a dispute happens after your money is already gone.
- Checks are slow, which is a feature. Slow means cancellable.
Paying by card also creates a paper trail investigators can follow, which matters if a report is ever filed.
An honest exception
Legitimate uses of these methods exist. People buy gift cards as gifts. Wires close on houses. Some people hold cryptocurrency deliberately.
The red flag is not the method alone. It is the method plus an inbound request plus urgency. Nobody who is genuinely owed money by you cares whether the payment arrives as a wire or a check. The insistence on one specific irreversible method is the signal, and it appears in the list of seven signals that show up in almost every scam for exactly that reason.
If a payment already went out
Move immediately, in this order: contact the institution that moved the money, then report. Gift cards should be reported to the issuing retailer right away, because a small fraction of funds is occasionally recoverable if the balance has not been spent. Everything else follows the sequence in what to do in the first 24 hours.
Report the incident to the Federal Trade Commission at reportfraud.ftc.gov and, for anything involving the internet or cryptocurrency, to the FBI at ic3.gov. Case data is how investigators connect individual losses into the networks behind them.