Prevent stamp card fraud: protect yourself
Every week you lose hundreds of euros to fake stamps without noticing. Digital stops it in 5 minutes.
Preventing stamp card fraud is nearly impossible with paper cards. A stamp is just ink – and ink can be copied. With digital cards, every stamp is recorded on the server and logged. This article shows you the typical tricks, what they cost, and how digital cards protect you.
The most common tricks with paper cards
Most shop owners underestimate how easily paper cards can be manipulated. This happens most often:
Counterfeit stamps: A standard stamp from a stationery store is often enough. Sometimes even a ballpoint pen mark works. You won't notice it at the busy checkout.
Copied cards: A half-full card is photographed and printed. With simple cardboard printing, you won't spot the difference.
Stamps among friends: An employee stamps friends' cards without any purchase. No one can prove it.
Multiple stamps: The customer asks for two stamps because they supposedly bought for a colleague. Or they present two cards.
Cards from the trash: Discarded half-full cards are collected and reused.
Stamp left out: The stamp sits at the checkout. Anyone can use it briefly.
No single case is dramatic. But added up, you no longer know if a full card represents real visits or not.
Take the self-test: How secure is your stamp card?
- Does your stamp sit openly at the checkout?
- Can employees stamp cards without you seeing it?
- Do you know how many rewards are redeemed per week?
- Have you ever seen a suspiciously quickly filled card?
- Can you trace who stamped when?
If you answer yes to two or more questions, you're probably losing money to fraud.
What fraud really costs
The damage isn't just the cost of goods for the reward. Example café: 10 stamps, free cappuccino with €0.80 cost of goods, €3.80 selling price.
| Item | For 5 fraudulent rewards per week |
|---|---|
| Cost of goods for rewards | 5 × €0.80 = €4.00 |
| Lost revenue (customer would have paid otherwise) | 5 × €3.80 = €19.00 |
| Visits that never happened for the 9 previous stamps | up to 45 visits that never occurred |
| Per year | over €1,100 in direct loss |
The second damage weighs heavier: You can no longer evaluate your program. If you don't know which stamps are real, you don't know if your reward is too generous. How important clean numbers are is shown in Measuring loyalty programs: 7 key metrics.
Why digital cards are more secure
The fundamental difference: with paper, the stamp balance is on the card. With digital, it's on the server. The card in the wallet only displays it. This creates multiple layers of protection:
No stamp without a scan: A stamp is only created when the checkout phone scans the QR code and the server confirms it. A screenshot has no value.
Unique card identification: Every QR code belongs to exactly one card. A copied card is the same card, not a second one. Double collecting doesn't work.
Cooldown between scans: After a stamp, the card is locked for an adjustable time, for example two hours. Two stamps in a row are technically impossible.
Daily limit: Maximum one stamp per day if you want. Makes sense for a bakery, maybe not for a bar with multiple drinks. That's why it's adjustable.
Velocity protection: If suspiciously many scans come from one device or card in a short time, it gets throttled.
Employee assignment: The team logs in to the scanner with their own PIN. Every stamp has a name attached.
Complete history: When, where, by whom, which card. Visible in the dashboard, not on a piece of paper.
Additionally, device recognition when creating the card and a cooldown against mass creation prevent someone from getting ten cards with the same phone. Details on how it works are in Digital stamp card: how it works.
Set cooldown and daily limit correctly
The protection mechanisms must fit your shop. Otherwise they block honest customers. Rules of thumb:
| Business type | Cooldown | Daily limit | Why |
|---|---|---|---|
| Café, bakery | 2 hours | 1 per day | Few customers come twice in the morning and afternoon |
| Restaurant | 4 hours | 1 per day | Lunch and dinner are separate visits |
| Bar, pub | 30 minutes | 3 to 5 per day | Multiple drinks per evening are normal |
| Barber, salon | 24 hours | 1 per day | One visit per day is the rule |
| Car wash | 12 hours | 1 per day | Two washes per day are unlikely |
If a regular customer actually comes twice a day and wants a second stamp, you can allow it in the dashboard as an exception. The rule applies to everyday situations, not every individual case.
How it looks in practice
A café owner sees in the dashboard: an employee gave out 40 stamps on a quiet Tuesday evening. Normally it's 15. He asks. The employee explains: a company group was there, everyone wanted a stamp. All clear. A week later, 35 stamps again, this time without explanation. The conversation gets more specific. With paper, he would have noticed nothing.
Handle employee fraud fairly
Linking stamps to employees isn't a distrust tool. It's traceability. Tell your team this openly when you introduce it. How to do this well is shown in Introducing digital stamp cards to your team.
If the dashboard shows that an employee gave out 40 stamps on a quiet evening, that's a conversation starter, not a judgment. Maybe a group was there. Maybe not. The difference from paper: you can ask at all because you see it.
Practical rules for the team:
- Stamps only for actual purchases
- No stamps on your own card, even for employee purchases (or an explicit rule for it)
- Don't share your PIN
- Note exceptions (courtesy stamps) briefly or tell the owner
What digital cards don't prevent
No technology prevents an employee from giving a stamp to a friend who only bought sugar. What digital prevents is invisibility. Every stamp has time, location, and name. You see irregularities in the history. The damage stays small because cooldown and limit restrict the quantity.
Similarly, a customer can create a card on a second phone if they try hard. Device recognition and cooldown on card creation make it inconvenient, not impossible. To get the reward, they still have to be in the shop for every stamp and buy something. That's exactly the behavior you want.
What happens if you don't change anything
Every week rewards go to customers who didn't earn them. You don't notice because paper leaves no trace. Your numbers don't add up. You don't know if your program works. And you can't trace whether an employee is giving away stamps. That costs you not just money, but trust in your own system.
Conclusion
Preventing stamp card fraud doesn't work with paper. Ink is copyable, and no one can trace what happened. Digital cards move the stamp to the server: no stamp without a scan, cooldown, daily limit, employee assignment, and a complete history. This makes abuse not just harder, but visible. stampa includes these protection mechanisms from the start, adjustable per shop. You can get started free – up to 100 active cards, no credit card, set up in 5 minutes.