FTID return fraud: when tracking says the return arrived and it didn't
How fake tracking ID (FTID) return fraud looks from a store's side, why refunding on a "delivered" scan is the weak point, and what to check before you refund a return.
2 minute read
A customer sends a return. Tracking shows it was delivered to your warehouse. The refund goes out. A week later, your warehouse still has no record of the package, or a box shows up with someone else's junk in it.
That's FTID, short for "fake tracking ID." It's a return fraud method sold and taught on the same forums that sell refund services, and researchers studying those forums list it among the common methods vendors offer.
What's going on
The fraud depends on a return label that's been changed so the carrier's scans make it look like your return was delivered to you, when the package actually went somewhere else or never held your product. According to NoFraud's explainer, a common result is tracking that shows delivery to a different address in the same ZIP code, which a busy returns team may accept as delivered.
We're not going to describe the method in more detail than that. The part that matters for a store is the weak point it exploits: refunding because tracking says delivered, before anyone has the item in hand.
Signs you're seeing it
- Returns marked delivered that your warehouse never received.
- Tracking for a return that shows delivery somewhere other than your returns address, even if the city and ZIP code match.
- Boxes arriving at your warehouse addressed to you but containing something unrelated, or nothing.
- A rise in "lost" returns, especially on high-value items.
None of these alone means fraud. Carriers lose returns too. But a returns process that never compares the delivery address in tracking with your own address won't notice any of them.
What to change
Refund on receipt, not on scan. This is the fix that matters most. Wait until the return is physically in your warehouse and someone has opened it. For low-value items you may decide the delay isn't worth it, but for anything worth stealing, a few days' wait closes the gap.
Check where the return was delivered. When tracking says delivered, compare the delivery location with your returns address. Same ZIP code isn't enough.
Record what comes in. Weigh each return when it arrives, photograph it opened, and record serial numbers. If a return is light, empty, or the wrong item, you'll have the evidence on the day it arrived. (Weight alone has limits. Riskified notes that fraudsters can match the weight of a return, so a matching weight isn't a clean bill of health.)
Generate return labels at drop-off when you can. Some carriers and returns platforms let the customer show a QR code at a drop-off point, and the label is printed there. That leaves the customer nothing to edit.
Look across returns, not one at a time. The same customer, address or payment method showing up on several "delivered but missing" returns is the pattern to look for.
If it's already happened
Pull the full tracking record for the return, including the delivery scan location. Contact the carrier with the tracking number and ask where the package was actually delivered. Keep the record, because if the same customer files again, you'll want it. If the amounts are large, report it to the carrier as well.