Cash-out gift card services: how laundering chains turn crypto into store credit
Laundering ends in the same place for every cybercrime business: someone has to convert digital value into spendable money or goods. The regulated crypto economy is full of chokepoints built to catch that moment, and blockchain analytics firms keep documenting them. Gift cards and prepaid store credit sit on a parallel track, one that needs no bank account, no identity check at the point of redemption, and no chain analysis to spend. That combination is why card-based cash-out has never disappeared from underground markets.
Why gift cards fit the cash-out problem
Chainalysis laid out the classic cash-out routes in a January 2020 report: move illicit funds to high-risk or unregulated exchanges, or use stolen identity documents to pass KYC at regulated ones, with mixers in between. The scale is significant — the firm estimated $33 billion in crypto laundered since 2016, and traced $2.8 billion in bitcoin from criminal entities to exchanges in 2019 alone, just over half of it to Binance and Huobi. Those chokepoints are exactly where investigators concentrate, which is precisely the problem for the launderer. A gift card code behaves differently. It is a bearer instrument: whoever holds the code can spend it, with no questions asked at the checkout. Transfer is instant, and the person redeeming it in a supermarket is usually an ordinary discount shopper, not a suspect.The services and the resale chain
KrebsOnSecurity documented one link of that chain in September 2021: a group compromising between 50,000 and 100,000 working email inboxes per day, with automated scripts logging in repeatedly to search for gift card and loyalty terms — Amazon, Hilton Honors, cards on the CashStar network. Hotel and airline points get drained onto gift card numbers, converting volatile loyalty balances into liquid store credit.You literally just pull cash out of peoples' inboxes, and then you have all these secondary markets where you can sell this stuff.That quote, from a researcher cited in the same report, describes the second half of the chain: resale. Cleaned-out value deposited onto gift cards can be resold online quickly for around 80 percent of its value, according to the report. Bulk inventory goes far cheaper. In April 2021, BleepingComputer covered the auction of roughly 895,000 gift cards claimed to come from 3,010 companies, with a claimed total value of $38 million — brands included Amazon, Walmart, Target, Marriott and Nike. The listing sold for a buy-now price of $20,000, a vanishing fraction of face value, and analysis by Gemini Advisory suggested many cards were likely inactive or low-balance, since such dumps normally trade at about 10 percent of face value. The discount is the margin: everyone in the chain, from harvester to broker to final reseller, takes a cut and still leaves the buyer a bargain.
What enforcement has documented
The goods-export variant of the scheme reached a US courtroom in July 2026, when federal prosecutors in New Hampshire charged Jinbin Ren with conspiracy to commit wire fraud. According to the indictment, gift cards obtained by co-conspirators through romance fraud, elder fraud, hacking and other scams were spent on high-value electronics, shipped to a warehouse in Salem, New Hampshire, consolidated and forwarded to China. Coordination ran through WeChat, with payments made in cryptocurrency, and the case was worked by the Homeland Security Task Force along with HSI, IRS Criminal Investigation and the Postal Inspection Service. An indictment is an allegation, not a conviction — the charge carries a maximum of 20 years — but it documents the mechanics in detail: card value leaves the card system as merchandise, and merchandise crosses borders more quietly than money does. On-chain laundering, meanwhile, keeps professionalizing. Elliptic called chain-hopping the defining money laundering method of 2025, noting that 33 percent of cross-chain investigations now span more than three blockchains. Gift-card cash-out is the low-tech complement: after the first conversion, the value never touches a blockchain again, which is why the two layers are often combined. The friction is real, though. Multi-factor authentication prevents more than 99.9 percent of account compromises, Microsoft told KrebsOnSecurity; bulk dumps contain dead cards; loyalty programs can claw back balances; and every documented case shows investigators piecing the chain together after the fact.Why the model persists
- Codes are bearer instruments — no name is attached at the point of use.
- Settlement between criminal counterparties is instant; a code is its own transfer.
- Discount resale demand from ordinary shoppers provides an unwitting exit into cash.
- Spending card value as goods moves value across borders as merchandise, not money.
- Per-item amounts are small, staying under thresholds tuned for payment cards.