From Ring Leader to Prison: How a $4M Scam Forced Changes to Home Depot Card Balances
The moment an internal or external actor clones a card number, a countdown begins. The fraud ring targeted two distinct instruments: closed-loop gift cards purchased off retail racks, and merchandise store credit issued during returns.
Store credit typically requires government-issued identification at the customer service desk to prevent illegal resale. However, workers inside the system can manipulate override codes or link stolen identification profiles to freshly generated vouchers. When legitimate customers finally ran their card through an online balance checker, the balance reported back was zero.
The transaction history often showed charges made hundreds of miles away hours earlier. The victims had not fallen for phishing emails, lost their wallets, or shared their gift card PIN verification numbers. Their credentials had been harvested directly from back-end ledger updates.