Triangulation Fraud

Overview

Triangulation Fraud is a commerce fraud scheme in which a criminal uses a legitimate storefront or marketplace listing to collect a customer’s payment and then fulfills the order using stolen payment credentials at another merchant. The customer may receive the product, which can delay detection and make the fraudulent seller appear legitimate. It should be interpreted alongside Card Not Present Fraud, which may affect the same workflow without representing the same control, event, or risk.

Victims include the cardholder, fulfillment merchant, platform, customer, and payment providers through chargebacks, lost goods, account abuse, and laundering of criminal proceeds.

Organizations should use seller verification, pricing-anomaly checks, linked-account and device analysis, fulfillment review, payment-instrument controls, chargeback monitoring, and evidence sharing.

Retain listing and seller data, customer order, fulfillment merchant, shipping address, payment instruments, device and network links, disputes, communications, and confirmed relationships.

Operational review of Triangulation Fraud should reconstruct the use of a legitimate storefront or marketplace listing to collect a customer’s payment and then fulfills the order using stolen payment credentials at another merchant using the identities, communications, devices, and transaction records available for the affected case. Investigators should separate confirmed facts from hypotheses about legitimate storefront, preserve the original evidence, and document why the event was cleared, escalated, or treated as a loss. Containment, recovery, and customer communication for the Triangulation fraud pattern should match the harm indicated by legitimate storefront.

Quality review for Triangulation Fraud should compare expected and actual outcomes involving legitimate storefront, then track false positives, repeat attempts, linked losses, and unresolved remediation.