Triangulation fraud
explained.

How triangulation fraud works

Visa describes it this way: illegitimate online merchants take a customer's order and charge the customer's payment account, then use an unassociated, legitimate merchant to fulfill the order, paying with stolen payment account information.

1. The fraudster lists popular goods at an attractive price on a marketplace or fake site.
2. A real shopper buys and pays the fraudster.
3. The fraudster orders the same item from your store with a stolen card, entering the shopper's name and shipping address.
4. You ship to the real shopper, who is happy.
5. Weeks later the real cardholder reports the charge, and you get a fraud chargeback such as Visa 10.4.

Why it slips through

• The shipping address is a real, residential address that receives the goods.
• Delivery succeeds, so "not received" signals never fire.
• The person receiving goods has no idea anything is wrong.
• Evidence is weak: you delivered, but to someone other than the cardholder, with no link to them.

Red flags

• Name mismatch: the billing name differs from the shipping name, with no gift message.
• Address distance: billing and shipping in different regions; IP near neither.
• Email mismatch: an email that doesn't fit the billing name, or a throwaway address.
• Product pattern: popular, easily resold items, sometimes in quantities that fit resale.
• Linked orders: the same device or IP placing orders for many different recipients.
• Repeat patterns: cards from different people shipping to unrelated addresses from the same session data.

A worked example

A sneaker store sees three orders in two days from the same device: each with a different cardholder name, each shipping to a different city, each a $210 limited release. Individually they look like gifts. Together they look like one fraudster fulfilling three marketplace sales. Holding the orders and asking each buyer to confirm by phone, or requesting 3-D Secure, would likely have prevented three chargebacks: $630 in goods plus fees.

What merchants should do

• Score shipping-to-billing mismatches together with device, IP and velocity, not alone.
• Watch for one device or IP buying for many recipients.
• Use 3-D Secure on high-risk mismatched orders to shift fraud liability.
• If you discover a triangulation order before shipping, cancel and refund the cardholder.

How Verdikx helps

Verdikx is a fraud, chargeback and dispute platform for e-commerce and SaaS merchants, made by Verdikx LLC. On Growth and Pro, order screening on new Shopify orders scores address mismatches, IP country against billing and shipping country, Tor and data-centre IPs (and proxies where a paid IP provider is enabled), identity velocity and linked orders, where a device or address is shared with a charged-back or flagged order from a different buyer. The storefront device pixel (consent-respecting) helps link orders from one device, and the opt-in Verdikx Network adds chargeback history from other participating stores. On Pro, the "Tag first-time international orders with mismatched addresses" template and custom hold rules let you stop risky orders before fulfillment.