Organized criminal networks based in China are conducting large-scale fraud operations targeting retail businesses across the United States, generating an estimated $1 billion annually through digital theft schemes. These operations represent an evolution in organized retail crime, distinct from traditional shoplifting and merchandise theft.
The fraud typically begins when scammers send mass text messages to consumers with false warnings about unpaid tolls, expiring registrations, or pending arrests. These phishing attempts aim to obtain credit card information and email credentials. Once fraudsters obtain this data, they add stolen credit cards to digital payment systems and use them to purchase gift cards or merchandise at major retailers. In many cases, foot soldiers—sometimes Chinese nationals brought into the country through smuggling networks—physically enter stores and conduct these transactions while being coached through wireless headphones by handlers operating from overseas compounds. The stolen gift cards are then used to purchase high-value goods like iPhones, which are shipped back to China and resold at premium prices.
Retailers have become primary targets because their platforms contain sensitive customer information and stored payment methods but generally lack the security infrastructure of financial institutions. Industry experts note that tap-to-pay and retail app fraud are less visible than traditional theft, making them lower-risk for perpetrators. Additionally, many retail applications prioritize customer convenience over bank-grade security measures. Law enforcement agencies note that complex cases often fall between jurisdictions, with some incidents not meeting federal crime thresholds and therefore receiving minimal investigation or prosecution.
The fraud extends beyond in-store transactions to include retail app account theft. Cybercriminals obtain login credentials through data breaches, phishing, and social engineering, then use stored payment information to make unauthorized purchases. Investigators have identified stolen retail account credentials being sold on messaging platforms, with older accounts commanding premium prices because they typically bypass basic fraud detection systems.
Government and law enforcement efforts to address the issue include Project Red Hook by Homeland Security Investigations, which has resulted in at least 239 arrests since January 2024. The Combating Organized Retail Crime Act, passed by the House in May and recently included in a Senate amendment to the National Defense Authorization Act, aims to improve information sharing between law enforcement and retailers to facilitate prosecution of complex cases.