Shipping Fraud
Shipping fraud is any scheme that exploits the fulfillment and delivery stage of an order rather than the payment itself. The payment may be entirely genuine; what is manipulated is where the goods go, whether they arrive, or whether the recipient admits they did.
It is worth separating from payment fraud because the controls are different. A merchant can have flawless payment screening and lose steadily on the delivery leg, and most fraud tooling is pointed at the transaction rather than at what happens after it.
| What is attacked | The fulfillment and delivery stage |
| Address manipulation | Redirecting a shipment after the order is approved |
| Reshipping | Goods sent to a recruited intermediary who forwards them |
| Item not received | A genuine delivery denied to obtain a refund |
| Freight and cargo | Fictitious pickups and impersonated carriers |
| Where it is caught | Order-to-delivery consistency, and identity at signup |
The main patterns
Address manipulation. An order is placed and approved with a low-risk address, then redirected — through the carrier’s own delivery-preference tools, a change request to customer service, or an intercept at the door. The fraud screening ran against an address that was never the destination, which is the whole point.
Reshipping. Goods bought with stolen cards are sent to a recruited intermediary, who forwards them abroad. The recruit is usually working a fake “package processing” or “logistics agent” job, believing it is legitimate. This breaks the link between the stolen card’s region and the eventual destination, which is what makes the goods sellable.
Item not received. A real customer receives a real delivery and claims otherwise to obtain a refund or a replacement. This is first-party abuse, and merchants absorb much of it because disputing a customer’s word costs more than the item.
Freight and cargo fraud. Fictitious pickups, where someone impersonating a carrier collects a full load; and identity theft of legitimate carriers, where a broker books a haul with someone using a real company’s credentials. Losses per incident are large and the identity question is about a business rather than a consumer.
Why the delivery leg is structurally weak
Fraud controls concentrate at the moment of payment because that is when the decision is made and the data is available. After approval, an order passes to fulfillment systems that were built for logistics rather than for risk.
That produces two gaps. Post-approval changes are usually not rescored — an address edited after checkout frequently does not return to the fraud engine, so the approval stands on facts that have since changed. And carrier-side redirection is outside the merchant’s systems entirely: delivery preference tools let a recipient reroute a parcel with credentials the merchant never sees.
The third weakness is who absorbs the loss. On item-not-received claims the merchant usually refunds, because the cost of contesting exceeds the item’s value — which sets a price on the abuse and guarantees a supply of it.
Why it matters for identity verification
Shipping fraud contains several distinct identity moments, and being specific about them is more useful than treating it as one problem.
The reshipping recruit. Package-forwarding jobs are recruitment, and they run through ordinary hiring channels with an application, an identity check and onboarding paperwork. Verifying the person is what makes the role traceable — and, as with money mules, the uncomfortable consequence is that enforcement lands on recruits rather than organizers.
The carrier or broker. Fictitious pickup and carrier impersonation are business identity problems. Verifying that a carrier is the entity it claims to be, and that the driver presenting at a facility is who the booking says, is document verification applied to freight rather than to consumer onboarding.
The marketplace seller. Where shipping fraud runs through a storefront — as in triangulation fraud — the seller account is the one entity that must be created, and therefore the one that can be verified before anything else happens.
What identity verification does not address is item-not-received abuse by a verified customer. That is behavioral: claim-rate analysis across a customer’s history, delivery evidence, and a policy decision about when to stop absorbing it.
What shipping fraud controls cannot do
They cannot see carrier-side changes. A redirect made through the carrier’s own tools happens outside the merchant’s stack, and often after dispatch.
Address risk scoring is blunt. Freight forwarders, mail drops and multi-occupancy buildings are commonly flagged, and each has a large legitimate population — students, shared housing, genuine international shoppers.
Delivery confirmation is weak evidence. A carrier scan proves a parcel reached an address, not that the right person received it, which is why item-not-received claims are hard to contest.
Blocking risky addresses loses real customers. The populations most often flagged overlap heavily with the ones a merchant is usually trying to grow into.
Frequently asked questions
What is reshipping fraud?
Goods bought with stolen cards are shipped to a recruited intermediary, who forwards them to another country. The recruit usually believes they have a legitimate package-processing job. It exists to break the link between the stolen card’s region and the final destination, which is what makes the goods resellable.
How is shipping fraud different from payment fraud?
Payment fraud attacks the transaction; shipping fraud attacks fulfillment. The payment in a shipping fraud case can be entirely genuine — what is manipulated is the destination, the delivery, or the claim about whether it arrived.
Why is address manipulation effective?
Because fraud screening runs at checkout and most systems do not rescore an order when the address changes afterward. The approval was made against an address that was never the real destination, and carrier-side redirects happen outside the merchant’s systems entirely.
Can identity verification stop shipping fraud?
It addresses the parts that are identity claims — verifying reshipping recruits, carriers and brokers, and marketplace sellers. It does not stop a verified customer falsely claiming a delivery never arrived, which needs claim-history analysis and delivery evidence instead.
Related reading
- Triangulation fraud — the scheme that routes goods through a real customer
- Drop address — the delivery endpoint used to receive goods
- Marketplace fraud — the platform context most of this runs through
- Card-not-present fraud — how the goods are usually paid for
