Recognize Fraud Using Your Identity for In‑Store Pickup and Curbside Orders

Same-day pickup is convenient—and a favorite tool for fraudsters. Criminals use stolen personal details to place “buy online, pick up in store” (BOPIS) and curbside orders, then collect the goods before you even notice a charge. This guide explains how to spot the early warning signs, confirm what’s happening, and take action to stop repeat abuse while protecting your credit and identity.

How Pickup Fraud Works (In Plain Language)

Pickup fraud typically follows a simple pattern: a criminal gets enough of your personal information to open a new retail account or break into an existing one, places an online order for same-day pickup (often selecting a store near them, not you), and quickly collects the items. Because there’s no shipping address, the order can be fulfilled within minutes, shrinking your reaction time. These schemes are powered by data from breaches, exposed personal details, and weak or reused passwords.

Common Entry Points

• Account takeover (ATO): Thieves log into your existing retailer account using breached passwords and saved card details.
• New account fraud: A new account is opened in your name using your email, phone, or address—sometimes with a new store card.
• Guest checkout with your card: Your card or wallet token is used without creating an account at all.
• Phishing and fake order texts: You’re tricked into entering login codes, which the fraudster uses to sign in and buy.

Early Warning Signs You Shouldn’t Ignore

Pickup fraud leaves small clues before and after the purchase. Recognize and act on these signals immediately.

Before the pickup

• Order or pickup notifications you didn’t start: “Your order is ready,” “Curbside pickup in 30 minutes,” or “Thanks for your order” from a retailer you use—or don’t.
• One‑time passcodes (OTPs) out of the blue: Texts or emails with verification codes for accounts you are not logging into.
• New device/location alerts: Retailers flag a sign‑in from a new browser or city.
• Credit or store card instant approvals: A message stating you’ve been approved for a store card you didn’t apply for.

During or right after the pickup

• Receipts for stores you didn’t visit: Digital receipts listing “Picked up by” or “Curbside fulfilled.”
• Charges pending at retailers you rarely use: Small test buys (gift cards, electronics accessories) before a larger order.
• Pickup location mismatch: Orders fulfilled in a different city or state than your residence or travel history.

Is It a Scam Message or a Real Order? Quick Checks

Fraudsters also send fake pickup texts to harvest your credentials. Confirm legitimacy without clicking risky links.

• Check your email/retailer app directly: Open the retailer’s official app or type the URL yourself. If the order is real, it will be in your account or guest order lookup.
• Use card issuer notifications: Review your bank or card app for pending charges from that retailer.
• Call the store using a number from the retailer’s website: Ask for the order number and pickup name. Do not call numbers in the text.
• Examine the sender: Shortcodes can be spoofed; typos, odd links, and urgent tone are red flags.

What to Do in the First 30 Minutes

Speed matters. If an order is already “ready for pickup,” you may still be able to block fulfillment.

1. Contact the retailer immediately: Use the phone number on the official website or app. Ask support or the store’s pickup desk to cancel and block the order due to suspected identity fraud. Request a note on your profile to require ID verification for future pickups.
2. Lock or remove payment methods: In your retailer account, delete saved cards and disable 1‑click or express checkout. In your bank/card app, lock the card to stop further authorizations.
3. Change passwords and force sign‑out: Update the retailer password with a unique, strong passphrase and enable two‑factor authentication (2FA). If available, force log out of all sessions.
4. Turn on real‑time alerts: Enable push/SMS/email for purchases, sign‑ins, and account changes at the retailer and your bank or card.
5. Document everything: Save screenshots of messages, order numbers, store location, timestamps, and names of support reps.

If the Fraudster Already Picked Up the Order

You still have options to limit losses and prevent repeat abuse.

• File a claim with the retailer: Ask for a fraud/chargeback process and proof of pickup (time, associate initials, device used). Some retailers can geo‑locate pickup scans or review CCTV.
• Dispute the charge with your card issuer: If the retailer will not resolve, open a dispute for fraud (not “merchandise issue”). Provide your documentation.
• Freeze or replace cards: Consider replacing the compromised card and updating autopayments.
• Check for related activity: Look for new orders, gift card purchases, or shipments you didn’t authorize.

Prevent Repeat BOPIS and Curbside Abuse

Once criminals find a “working” identity, they often return. Harden your defenses at the account, device, and identity levels.

Lock down retailer accounts

• Unique passwords everywhere: Never reuse your email or banking password on retail sites. Use a password manager to generate and store strong passphrases.
• Enable 2FA with an authenticator app: App‑based codes are safer than SMS and reduce SIM‑swap risk.
• Review saved info: Remove stored cards, limit saved addresses, and disable “buy online, pick up in store” default preferences if available.
• Add pickup ID requirements: Ask customer service to add a note that government ID must match the account name for pickups. Some stores can require card‑present verification at counter.
• Audit email security: Secure the email that receives order confirmations—turn on 2FA and review recovery options.

Secure payments and notifications

• Turn on bank and card alerts: Real‑time notifications for card‑not‑present purchases help you catch orders before pickup.
• Use virtual card numbers where possible: Many issuers let you create merchant‑locked or one‑time numbers that are useless elsewhere.
• Avoid storing cards broadly: Only keep payment methods saved at retailers you trust and use frequently.

Reduce your exposed personal information

• Remove data broker listings: Public records and people‑search sites expose addresses, phone numbers, and age—useful for pass‑off at pickup. Consider opting out and removing entries.
• Minimize oversharing: Avoid posting travel plans or location tags that can signal when your local store is “safe” for a fraudster to attempt pickup.
• Watch for breach notices: If a retailer or password manager reports a breach, change credentials immediately.

Red Flags at the Store Level (For You or Store Staff)

If you’re present at pickup or speaking with a store associate, these signals suggest the order may be fraudulent:

• Mismatch details: Pickup name does not match the cardholder or account name; the person refuses to show ID when asked.
• Rushed or evasive behavior: Insistence on curbside only, avoiding the counter, or pushing staff to skip ID checks.
• Multiple rapid‑fire orders: Back‑to‑back small orders for easily resold items (gift cards, game consoles, accessories).
• Unusual pickup location: Store is far from the account address with no plausible reason.

How to Report and Build a Paper Trail

A strong record speeds resolutions and helps stop repeat attacks.

1. Retailer fraud department: Request a case number, notes on the account, and ID‑required flags for pickups.
2. Card issuer/bank: File a fraud report or dispute; ask for a card reissue and token reset (for mobile wallets).
3. Local law enforcement (optional but helpful): File an incident report for identity theft, especially if store CCTV exists.
4. Federal reporting (U.S.): Submit a report at IdentityTheft.gov to receive a recovery plan and documentation.
5. Credit bureaus: If new‑account fraud occurred, place a fraud alert or credit freeze to slow further misuse.

Protect Your Financial Identity Going Forward

Pickup scams often accompany other identity threats—new credit applications, account takeovers, or unauthorized transactions. Continuous monitoring gives you a faster alarm and more context when something changes.

Consider using a trusted service that consolidates alerts for credit changes, identity‑related activity, and account takeovers. For a practical, consumer‑friendly option, see our resource on privacy, credit monitoring, and identity protection.

Simple Checklist: What to Do Today

• Turn on bank/card transaction alerts and retailer sign‑in notifications.
• Change passwords for retailers you use; enable app‑based 2FA.
• Remove saved cards from retail accounts you rarely use.
• Opt out of major data brokers to reduce publicly exposed details.
• Create virtual card numbers for online purchases when your issuer supports it.
• Review recent orders and wallets for unfamiliar devices or tokens; revoke access.

Frequently Asked Questions

If an order is “processing,” can I still stop it?

Yes. Call the store’s pickup desk or retailer support immediately and ask them to cancel. Many orders can be stopped before the associate completes the pickup handoff, especially within the first hour.

Do retailers always check ID at pickup?

Policies vary. Some require ID only for high‑value orders or when paying at pickup. Ask support to flag your account for ID‑required pickups every time.

Is a chargeback my only option?

No. Start with the retailer’s fraud process; they may reverse charges and investigate internally. If that fails, your card issuer can process a fraud dispute.

Will freezing my credit help?

A credit freeze does not stop charges on existing cards but prevents most new credit lines in your name, which helps if criminals try to open store cards.

What items do fraudsters target?

Gift cards, video game consoles, phones, earbuds, designer goods, and small electronics—items that are easy to resell quickly.

Conclusion

Fraud using your identity for in‑store pickup or curbside orders moves fast, but so can you. Watch for surprise order confirmations, OTP texts you didn’t request, and receipts from unfamiliar stores. Verify activity through official apps or by calling the store directly, then cancel, lock cards, change passwords, and enable 2FA. Reduce future risk by limiting stored payment methods, cleaning up exposed personal data, and turning on real‑time alerts. With swift action and ongoing monitoring, you can shut down pickup scams before they turn into larger identity theft problems.