A field guide to how prepaid and gift cards slip past first-order fraud checks, why subscription programs are the prime target, and how to close the gap without adding friction for the customers you want to keep, by Jordan Shamir, VP of Product & BD at Wyllo
Subscription brands have spent years sharpening their acquisition playbooks. Free trials, first-order discounts, deep welcome offers. They work because they are designed for real customers, the kind who stick around long enough for the second, third, and tenth order to pay back that opening incentive. The model is built on a simple bet: the lifetime is worth the discount.
That bet only holds when the new customer is real. Increasingly, some of them are not. Over the past several months, a specific pattern has been climbing across subscription businesses: bad actors using prepaid and gift cards to claim first-order promotional pricing again and again, each time arriving as a brand new shopper. The mechanic is almost boring in its simplicity, which is exactly why it works. A prepaid card carries no identity. No billing address on file, no dispute history, no thread back to a previous account. To a traditional fraud check, it reads clean. The order approves, the discount ships, and the “customer” never returns.
One actor is a rounding error. A coordinated ring working a stack of prepaid cards is a line item. This guide breaks down what prepaid card fraud looks like in a subscription context, why the economics make subscriptions the target, and how to close the gap with judgment rather than blunt force, so the offers keep converting the customers you actually want.
What Is Prepaid Card Fraud?
Prepaid card fraud is the use of prepaid or gift cards, which are not tied to a verified identity, to extract value a merchant intends for genuine new customers. In subscription commerce, the most common form is promotional abuse: a bad actor funds a first order with a prepaid card to capture an introductory discount or free trial, abandons the account before the first full price rebill, and repeats the cycle with a fresh card and a fresh identity.
It is worth separating this from the gift card scams consumers are warned about, where a victim is tricked into paying a scammer with gift card numbers. Here the direction is reversed. The card is the attacker’s instrument, not the victim’s loss. What the two share is the reason prepaid plastic keeps showing up in fraud reports: it is anonymous, widely available, and effectively irreversible. The U.S. Federal Trade Commission has reported gift and prepaid cards among the most common payment methods named in fraud reports for several years running, precisely because those traits make the money hard to claw back and the actor hard to trace.
Why Prepaid Cards Slip Past Traditional Fraud Checks
Most legacy fraud screening is built to answer one question: is this payment likely to result in a chargeback? That framing quietly assumes the card has an owner, a billing address, and a bank relationship that can later be checked against the order. Prepaid cards break the assumption. There often is no registered cardholder, the billing address may be blank or generic, and there is no account history to lean on.
So the usual risk signals come back empty rather than alarming. Address verification has nothing to match. There is no prior dispute record because the card has no past. The transaction authorizes normally, because authorization only confirms the card has funds, not that the buyer is who the offer was meant for. A check tuned to spot stolen credit cards sees a quiet, well-funded, dispute-free order and waves it through.
The deeper issue is that a payment instrument was never a reliable proxy for a person. A prepaid card answers “can this transaction clear?” It says nothing about “is this a new customer worth a 50% welcome offer, or the same actor on their ninth card?” Closing the gap means reading intent, the signals around the order, rather than trusting the instrument funding it.
Why Subscription Programs Are the Target
The math is what draws attackers to subscriptions specifically. Few business models offer incentives as deep as a subscription welcome: 40%, 50%, sometimes a fully free trial period, all front-loaded onto the first order on the expectation of recouping it over a long relationship. For a one-and-done actor with a handful of prepaid cards, that front-loaded value is the entire prize. There is no second bill to dispute, no relationship to maintain, no reason to ever come back. The discount is harvested and the seat is churned before the economics were ever supposed to be tested.
The stakes are not small at the category level. Juniper Research projects the global subscription economy will approach $1 trillion in value by 2028, and the offers fueling that growth are exactly the surface this attack exploits. Promotional abuse has moved from a nuisance to a recognized fraud category in its own right; Mastercard now treats promotion abuse as a distinct threat requiring dedicated detection. And the broader signal is hard to miss: the Merchant Risk Council’s research has ranked refund and policy abuse among the top fraud threats facing ecommerce, the same family of “abuse the rules, not the rails” tactics that prepaid promo farming belongs to.
There is a reason this lands harder on subscription teams than on one-time retailers. A retailer discounts a unit and moves on. A subscription brand discounts a relationship it expects to earn back over months. When that relationship never exists, the loss is not one margin point on one order, it is the full subsidy with nothing behind it.
The Hidden Cost: Distorted Acquisition Data
The lost margin on discounted goods is the obvious damage. The quieter damage is to the numbers subscription teams steer by.
Every fraudulent first order books as a new customer. It inflates acquisition counts, flatters the cost-per-acquisition math, and then vanishes before the second bill, which quietly drags down the retention and repeat-rate metrics those same teams use to judge what is working. A welcome offer that looks like a winner in the acquisition dashboard can be a margin sink underneath, because a slice of its “new customers” were never customers at all. Growth and finance leaders end up optimizing against a cohort that was partly fictional.
That distortion compounds. Decisions about which offers to scale, which channels to fund, and what a subscriber is worth all rest on cohort data. When prepaid promo abuse seeds that data with one-and-done actors, the model learns the wrong lessons. Clean acquisition numbers are not a vanity metric here. They are the input to nearly every growth decision a subscription business makes, which is why this matters as much to a retention-focused growth team (Bain’s classic finding that a 5% retention lift can raise profit 25% to 95% assumes the cohort is real) as it does to the fraud desk.
How to Close the Prepaid Card Loophole
The instinct to simply ban prepaid cards is understandable and usually wrong. Plenty of legitimate shoppers pay with prepaid or gift cards, including gift recipients, the underbanked, and privacy-minded buyers. Blanket blocking trades a fraud problem for a false decline problem and turns away real revenue. The better approach is proportionate: treat the payment instrument as one signal among many, and reserve the firmest responses for orders where the prepaid card sits alongside other indicators of promo farming.
A few practices that hold up:
- Read the card’s BIN, not just its balance. The Bank Identification Number, the leading digits of any card, reveals whether an instrument is prepaid, gift, credit, or debit. Surfacing that attribute at decision time turns “this card has funds” into “this is a prepaid card being used against a first-order offer,” which is a far more useful input.
- Tie the payment signal to identity and behavior. A prepaid card alone is not proof of abuse. A prepaid card paired with a brand-new disposable email, a device that has touched several recent signups, or a shipping detail that links to other “new” accounts is a pattern. Promo farming is rarely a single order; it is the same actor in light disguise, which is why connected signals beat any one rule.
- Apply policy where it belongs, not at the door. Rather than declining every prepaid order outright, the cleaner control is conditional: a prepaid card need not disqualify a purchase, only the introductory pricing on it. Let the order through at standard terms, or route it for a closer look, while reserving the deep welcome offer for buyers who show genuine new-customer intent. The policy is a business decision; detection just makes it enforceable.
- Watch the rebill, not only the signup. Because prepaid promo abuse is defined by the absence of a second payment, the tell is often in what does not happen. Cohorts that churn en masse right before the first full-price rebill, clustered by card type or signup window, are worth a hard look even when each individual order looked fine on its own.
- Audit offers and rules on a cadence. The tactics shift. A rule set tuned a year ago is usually a step behind today’s ring. Treat promo-abuse defenses the way you treat the offers themselves: as something reviewed and adjusted, not set and forgotten.
How Wyllo Helps
Wyllo is the risk intelligence platform for commerce. The thread running through prepaid card fraud is the one Wyllo is built around: the payment instrument is a weak proxy for the person, so the answer is to read intent from the signals surrounding the order rather than trust the card funding it. Risk is what gets an order looked at. Intent is what explains whether the welcome offer belongs on it.
In practice, a few parts of the platform do the most work against this pattern:
- Wyllo Payment Fraud Protection screens every order before it completes, weighing payment-method attributes (including the card’s BIN) alongside device, network, and identity signals through AI-driven decisioning backed by human fraud analysts. Merchants can express their own policy through custom rules, so a prepaid card can be handled exactly as the business intends rather than passed through blind.
- Wyllo Bot and Reseller Detection surfaces the multiple-account and disposable-identity patterns behind promo farming, connecting “new” shoppers that traditional checks treat as unrelated.
- Wyllo Claim and Policy Abuse Prevention catches the broader family of policy and promotion exploitation upstream, before subsidized goods ship to actors who were never going to stay.
Precision over paranoia. The goal is not to wall off a payment type, it is to give the deep welcome offer to the customers it was designed for, and to recognize the ones quietly farming it.
Frequently Asked Questions
What is prepaid card fraud?
Prepaid card fraud is the use of prepaid or gift cards, which carry no verified identity, to obtain value a merchant intends for genuine customers. In subscription and promotional contexts it usually means funding a first order with a prepaid card to claim an introductory discount or free trial, then abandoning the account before the first full-price charge and repeating with another card and identity.
Why do prepaid cards bypass fraud detection?
Traditional fraud screening is largely tuned to predict chargebacks, which assumes the card has a registered owner, a billing address, and account history to verify against. Prepaid cards often have none of those, so address checks find nothing to match and there is no dispute record to flag. The order authorizes normally because authorization only confirms available funds, not the buyer’s intent. The instrument looks clean while the intent behind it is not.
Why are subscription businesses especially exposed?
Subscription programs offer some of the deepest first-order incentives in ecommerce, front-loaded on the expectation of a long customer relationship. A one-and-done actor using prepaid cards extracts that front-loaded value with no relationship to maintain and no recurring charge to dispute. The deeper the welcome offer and the more it relies on lifetime value to pay back, the more attractive the target.
Should I just block all prepaid cards?
Usually not. Many legitimate shoppers use prepaid and gift cards, so blanket blocking creates false declines and turns away real revenue. The stronger approach is proportionate: detect the prepaid attribute, weigh it against identity and behavior signals, and apply conditional policy, for example reserving introductory pricing for verified new-customer intent rather than declining the purchase outright.
How does prepaid card fraud distort growth metrics?
Each fraudulent first order books as a new customer, inflating acquisition counts and flattering cost-per-acquisition, then disappears before the second bill, which depresses retention and repeat-rate figures. The result is cohort data seeded with customers who never existed, leading teams to scale offers and channels based on partly fictional performance.
Can fraud tools detect prepaid cards at checkout?
Yes. A card’s BIN, the leading digits of the number, identifies whether it is prepaid, gift, credit, or debit. A risk intelligence platform that surfaces that attribute at decision time, and connects it to identity and behavioral signals, can flag prepaid cards being used against first-order offers and let merchants act on them before the order completes.
Bringing It Together
Prepaid card fraud is not a sophisticated exploit. It is a clever reading of an honest incentive: subscription brands front-load value to win a relationship, and a certain kind of actor takes the value while skipping the relationship. The reason it works is that a payment instrument was never a stand-in for a person, and a discount aimed at “new customers” only pays off when the new customer is real.
Closing the gap does not mean retreating from generous offers or treating every prepaid shopper as a suspect. It means seeing the prepaid attribute clearly, reading it alongside the identity and behavior around the order, and reserving the firmest response for the patterns that actually signal abuse. Done well, the welcome offer keeps doing its job, the acquisition data stays honest, and the customers you set out to win are the ones who get the warmest welcome.
Curious how reading intent rather than trusting the instrument would change what your first-order offers actually return? Start with Wyllo Payment Fraud Protection for transaction-level decisioning, or explore the broader Wyllo platform for connected intelligence across the full customer journey.
