Start with the payment, not the profile
Once card details have been sent, the useful work is documenting the payment and contacting the issuer. A username or profile match is only a lead; it does not prove who received the card, and no lookup can retrieve money or undo a transfer. Treat the next hour as evidence preservation and issuer contact.
Keep the PIN and code private
Do not post the card number, PIN, barcode or full receipt image in a public forum, chat group, social post or support thread you do not control. Share those details only through the issuer’s official contact channel. If you are talking to a person who claims to be helping, do not read the code aloud to anyone who contacted you first.
Build a short evidence packet
Write one timeline with times, time zones and what you actually have. Keep originals; do not edit screenshots.
| Item | What to record | Why it matters |
|---|---|---|
| Card | Brand, last four digits, purchase date, amount, where bought | Identifies the card without exposing the full number |
| Receipt | Store, order number, payment method, date and time | Supports proof and amount of purchase |
| Transaction | When the card was shared, with whom, and any balance or redemption notice | Shows the loss window |
| Messages | Platform, handle shown, timestamps, what was requested | Documents the impersonation context |
| Contact log | Issuer channel, date, time, reference number, what you were told | Tracks the claim and follow-up |
Keep the actual PIN and full card code out of the timeline document unless the issuer specifically asks for them through its verified channel.
Contact the issuer in a safe order
- Use the phone number or support page printed on the card, receipt or the issuer’s official site. Do not use a link or number sent by the person who asked for the card.
- Say plainly that the card was obtained through an impersonation scam and that you are requesting a refund or balance hold.
- Give the card brand, last four digits, purchase details and the timeline. Provide the full code only if the issuer’s verified agent asks for it.
- Ask what the issuer will do next, what reference number to use, and what evidence it wants. Write the answers down.
- Keep the card and receipt. Do not throw away a drained card; it may still be needed.
If a scammer obtained a gift card number and PIN, the FTC advises contacting the gift card issuer immediately, explaining the scam and asking for a refund. Source
The FTC advises keeping the gift card and receipt, if available, because they may be needed to follow up on the claim. Source
An issuer request is a request, not a promise. The issuer decides whether a refund or balance hold is possible, and its process may differ from what you expect.
Decide what to do while you wait
| Situation | Reasonable next step | Limit to keep in mind |
|---|---|---|
| Issuer opened a claim | Log the reference number and ask when to follow up | A claim is not a refund |
| Issuer says the balance was already redeemed | Ask what evidence it needs and whether a fraud report should be filed | You may not recover the value |
| You are in the US and want to report the scam | Use the FTC’s official reporting channel and keep your own copy | FTC guidance is US-specific; it is not a global rule or a recovery service |
| You found a public profile that looks connected | Save the profile URL and handle as a lead | A match does not prove ownership or locate the recipient |
If you are outside the US, use the consumer-protection or fraud-reporting channel that applies where you are; the FTC process described here is US guidance, not a universal deadline or legal rule.
Preserve the record without exposing it
Store the timeline, receipt, card and message exports in one place you control. Redact the full card number and PIN from any copy you send by email or upload to a portal unless the issuer’s verified process requires them. Do not delete the original messages, even if the account that sent them disappears.
What a username lookup can and cannot do
A public username search can help you follow a known public handle and save what is visible. TraceSeek covers 3,000+ platforms and a first scan is free, with a stated scan time of 20-30 seconds. It does not change account settings, provide recovery codes, retrieve money or verify a real identity. Use it, if at all, to document a lead alongside the issuer packet, not as a substitute for contacting the card issuer.
If the same conversation is still moving toward another payment, the related guide on gift card requests and customs fees explains how the payment request itself can be a warning sign: Gift card requests and customs fees: the payment tells of dating fraud.
A short recap
- Document card, receipt, transaction, messages and contact log before anything else.
- Keep the PIN and full code private; share them only through the issuer’s verified channel.
- Contact the issuer immediately, ask for a refund, and keep the card and receipt.
- Treat the issuer’s response as a decision, not a guaranteed outcome.
- Keep FTC reporting in its US context and use local channels elsewhere.