Why triangulation fraud matters
Everyone but the fraudster loses: the legitimate store eats the chargeback when the stolen card’s owner disputes, the customer’s data is harvested and their money funded crime, and the goods arrived, so nobody suspects for weeks. For the store, it looks like a normal order until the dispute lands.
How the scheme looks from the store’s side
- Orders shipping to names that don’t match the cardholder
- Fresh accounts, mismatched billing and shipping, marketplace-typical goods
- Volume patterns: the same buyer profile ordering popular resale items repeatedly
- Chargebacks arriving on delivered, unremarkable orders
Questions
How do stores defend against triangulation?
The standard card-not-present toolkit aimed at its signature: verification mismatches weighted seriously, velocity rules on ship-to addresses and devices, and 3DS challenges on the risky slice. The scheme leans on orders looking normal; the mismatches are where it doesn’t.
Why don’t victims notice sooner?
Because the product arrives: the marketplace buyer got their deal, the cardholder notices the charge on their own statement later. The delay is the scheme’s camouflage.