Security & trust

Loyalty Card Fraud: How to Stop Fake Stamps for Good

How loyalty card fraud happens at small businesses (copied stamps, shared cards, screenshots) and the practical steps that stop fake stamps for good.

By the StampOwl team · · 3 min read

Paper stamp cards are wonderfully simple, which is exactly why they're so easy to cheat. Loyalty card fraud rarely makes headlines, but for a small shop every faked card is a free pizza, coffee or haircut you never meant to give away. Here's how it happens and how to stop it.

How loyalty card fraud happens

Copied stamps

Rubber stamps and ink are cheap. A matching stamp, or a pen drawn into the boxes, can fill a card in minutes.

Taking extra cards

Blank cards left on the counter get picked up by the handful, then filled in at home.

Sharing cards

Friends pool stamps on one card, or a card gets passed around an office or a group of students.

Screenshot sharing (digital cards)

Badly designed digital cards have their own weakness: a static QR code can be screenshotted and shared in a group chat, so everyone collects stamps on one card.

Mistakes and favours

Not all fraud is malicious. Staff may stamp twice by accident, or add "one for luck" for a friend. Without a record, you can't tell.

Why it matters

Each faked card costs you a full reward, and you can't see the scale of it with paper. A scheme that's meant to build loyalty ends up giving away stock to the people gaming it.

How to stop fake stamps

1. Only staff can add stamps

The single most important rule. Customers should show their card; your staff should add the stamp. Never use systems where customers can stamp their own card by scanning a code on your counter.

2. Protect the scanner with a PIN

Staff should open the scanner with their own PIN, never your own login. Every stamp then shows who gave it, and if someone leaves, remove them and their phone signs out.

3. Use codes that change

The customer's card should show a code that changes every 30 seconds. A screenshot shared in a group chat stops working almost immediately.

4. Limit stamps per visit

A sensible default is one stamp per card every 10 minutes, which stops repeated scanning. If one order genuinely includes several items, you can relax the limit for your shop.

5. Keep a record of every stamp

Every stamp, reward and undo should be logged with the time and device. You can then spot unusual patterns and settle any dispute.

6. Make undo easy

Mistakes happen. Staff should be able to undo a stamp straight away rather than "making up for it" later.

Signs your current scheme is being gamed

Even without a digital system, you can look for warning signs:

  • Rewards claimed faster than seems possible, such as a full card from someone you've only seen a couple of times.
  • Stamps that look slightly different in colour, size or position.
  • The same handful of customers claiming most of the rewards.
  • Your stock of blank cards disappearing faster than new customers arrive.
  • Rewards claimed on a staff member's shifts far more than on others.

None of these proves fraud on its own, but if several apply, it's time to tighten things up.

A fair policy for honest mistakes

Not every odd stamp is fraud. A clear, friendly policy keeps things fair for everyone:

  1. Mistakes are undone straight away, with no fuss.
  2. One stamp per qualifying purchase, applied the same by every member of staff.
  3. The owner reviews the stamp history occasionally rather than accusing anyone on the spot.
  4. Rewards can't be exchanged for cash.

Writing this down, and telling your staff, removes awkward judgement calls at the counter.

Moving from paper to protected digital cards

If you're worried about fraud on paper cards:

  1. Stop leaving blank cards on the counter.
  2. Switch new customers to a digital card with staff-only stamping.
  3. Honour existing paper cards until they're used up.
  4. Check your dashboard for patterns once the digital card is running.

See paper vs digital loyalty cards for a smooth switch plan. Takeaways are often hit hardest; our takeaway loyalty scheme guide covers their situation specifically.

Fraud protection built in

StampOwl was designed around these rules: staff-only stamping with a PIN, customer codes that change every 30 seconds, a sensible stamp limit, a full stamp history and one-tap undo. You can read how the codes work in our QR code loyalty card guide, or try it free for 30 days.

Frequently asked questions

How common is loyalty card fraud in small shops?

With paper cards it's hard to know, because faked stamps look like real ones. That's part of the problem: you can't measure what you can't see. Digital cards log every stamp, so you can.

How do digital loyalty cards prevent fake stamps?

Only staff can add stamps, through a scanner protected by a PIN. The customer's code changes every 30 seconds so screenshots don't work, and stamps are limited to one per card in a short window.

What should I do if a member of staff leaves?

Remove them from your staff list. With StampOwl, each person has their own PIN, so their phone signs out straight away and nobody else is affected.

Can staff undo a stamp added by mistake?

Yes. Staff can undo straight away, and the owner sees every stamp, reward and undo with the time and device.