Inside the $1 Billion Tap-to-Pay Fraud Rings Targeting Banks and Retailers

Chinese organized crime networks are earning an estimated $1 billion annually by using stolen credit card data and tap-to-pay technology to buy gift cards at self-checkout kiosks, then reselling the goods or cards in China. US Homeland Security has launched “Project Red Hook,” its first federal task force specifically targeting the Chinese organized-crime role in this fraud.

Why this story matters more than the headline suggests

Coverage so far has largely treated this as a retail-security curiosity — a clever new theft technique. The more significant story is what it reveals about the evolution of transnational financial crime: organized networks have shifted from clearing store shelves to running low-visibility digital operations that exploit tap-to-pay convenience, and federal investigators say this is now intersecting with narcotics and human-trafficking financing.

How the scheme actually works

Federal investigators describe a layered operation. At the visible end, an individual — often instructed remotely — walks into a store, methodically buys gift cards for amounts like $95 at self-checkout, and pays using stolen credit card credentials loaded onto a phone’s tap-to-pay function. Homeland Security Investigations assistant special agent in charge Adam Parks has described this street-level activity as merely “the lowest level of the organization” — the point where most arrests happen, even though it represents a small fraction of the network’s total structure (CNBC).

Behind that visible layer sits a broader ecosystem: stolen card data is harvested through data breaches, phishing, and social engineering — piecing together publicly available personal information to access retail accounts. Investigators found login credentials for major retail apps being sold on Telegram channels for as little as $1.50 to $2.50 apiece (CNBC). The resulting gift cards or goods are either resold at a discount domestically or shipped internationally for resale in China, converting digital theft into physical, harder-to-trace profit.

The scale

CNBC’s investigation examined roughly a dozen cases spanning retailers including Lowe’s and TJX Companies, and estimated Chinese crime rings are collectively earning as much as $1 billion a year from these schemes (CNBC).

A related but distinct scheme, known as “card draining,” involves thieves tampering with physical gift cards displayed on in-store J-hooks so they can steal the balance the moment a customer activates the card. The Department of Homeland Security has launched a previously unreported initiative, dubbed “Project Red Hook,” marking the first time federal authorities have specifically targeted the Chinese organized-crime dimension of gift-card fraud (ProPublica).

Investigators believe proceeds from these schemes help fund other criminal activity, including narcotics trafficking — an assessment that follows earlier ProPublica reporting on Chinese organized crime’s role in the US illegal cannabis industry and in laundering profits from cocaine, heroin and fentanyl sales (ProPublica).

The Beijing side of the ledger

This isn’t purely a US-facing problem. Chinese authorities have run their own parallel crackdown on the underground banking networks that move illicit funds domestically. Police uncovered $30 billion worth of illegal banking activity in a single year, spanning 158 cases across 192 locations, as part of a joint task force involving the Ministry of Public Security, the central bank and the foreign exchange regulator (Business Standard/Reuters). Xinhua reported the single largest case uncovered in the crackdown involved $64 billion in illegal transactions — evidence that the underground financial infrastructure enabling this kind of cross-border fraud has scale on both ends of the Pacific.

Separately, the US House Select Committee on China has documented a related but geographically distinct threat: billion-dollar scam compounds concentrated in Cambodia and Myanmar that combine cyber fraud with human trafficking, operating through Chinese underground banking networks and cryptocurrency brokers, according to the committee’s investigation, dubbed Operation Shamrock (Operation Shamrock).

What retailers and consumers can do

Security researchers interviewed by CNBC describe the fraud ecosystem as remarkably specialized, with distinct roles for data harvesters, in-store “travelers” making purchases, and logistics operators handling international shipping. For consumers, the most direct point of exposure is stored payment credentials inside retail apps — precisely the data being sold cheaply on messaging platforms. For retailers, the exposure sits at self-checkout kiosks, where tap-to-pay’s speed and minimal friction, designed to reduce checkout time, has become the same feature criminals exploit to move quickly before detection.

The bigger picture

What distinguishes this wave of organized retail crime from earlier shoplifting-driven “flash mob” retail theft is its financial sophistication: it behaves less like street crime and more like a distributed money-laundering operation that happens to route through gift cards and consumer electronics instead of shell companies. For a financial crime and internal-affairs audience, the more consequential development may not be the $1 billion annual take itself, but the fact that US federal law enforcement has, for the first time, formally named the Chinese organized-crime dimension of the problem and stood up dedicated resources against it.