Loyalty Card Fraud: Practical Controls for Small Businesses
· Beyond Stamping Editorial Team · 7 min read
Reduce loyalty card fraud without souring customer experience. Practical controls, staff scanning checks, fair policies and exceptions, with examples and decision tools.
To cut loyalty card fraud, use light-touch checks at the till, keep staff scanning visible, and write a short policy that allows clear, customer-friendly exceptions. Add simple visibility: review stamp patterns once a week, not once a year. Most abuse is preventable with proportionate controls: issue stamps from a staff device, cap stamps per visit, define eligibility, and log exceptions. Digital wallet stamp cards can make this easier, but the principles work for paper too.
How loyalty card fraud happens in small shops
Understanding the patterns keeps controls practical rather than heavy-handed:
- Multiple stamps per single visit: a customer persuades staff to scan twice, or staff mis-tap in a rush.
- Staff scanning for friends (“off-receipt” issues): stamps issued without a matching purchase.
- Customer self-stamping: someone finds a public QR or unattended device and helps themselves.
- Retroactive stamping: customers ask for backdated stamps well beyond your stated window.
- Returns after stamping: item is refunded but the stamp remains.
- Referral program fraud: self-referrals, duplicate accounts, or non-qualifying “first visits” to trigger rewards.
Fraud here is usually “opportunistic creep”, not organised crime. That’s good news: straightforward controls and consistent coaching typically reduce loss to a tolerable level while keeping your best customers smiling.
Reasonable controls to reduce loyalty card fraud
You want to deter abuse without turning your till into airport security. Start with a small set of rules that front-of-house can remember under pressure:
- One stamp per eligible visit or per spend threshold (e.g., one stamp per £5+ transaction), not per item unless you truly want to.
- Stamps are issued by staff scanning on a store device; customers shouldn’t self-scan.
- Cap stamps per transaction and per day per customer (e.g., max 2 on the same day).
- Keep a simple exception note: one goodwill stamp per customer per month if they forgot their phone or had a tech issue.
- Refunds void stamps associated with the purchase where you can; otherwise record an exception.
Decision framework to balance risk, effort, and guest experience:
| Risk pattern | Primary control | Customer friction | Effort to run | When to use |
|---|---|---|---|---|
| Multiple stamps for one visit | Cap stamps per receipt/day; define eligible spend/services | Low | Low | Most venues, all day |
| Staff scanning for friends | Issue stamps only from a staff-controlled device in view of the till/camera; random receipt checks | Low–Medium | Medium | Higher-risk shifts or teams |
| Customer self-stamping | Do not display public QR for stamps; require staff scan workflow | Low | Low | Always |
| Retroactive stamping | Set a clear window (e.g., 7 days with receipt); beyond that, one-time goodwill | Low | Low | Busy counters |
| Refunds after stamping | Void/adjust stamps on refund; add a simple log for exceptions | Medium | Medium | Shops with frequent returns |
| Referral program fraud | “Qualifying first visit” defined in Terms; no self-referrals; delay reward until visit is verified | Low | Low–Medium | When you run referrals |
Illustrative example: A neighbourhood café noticed a spike of 60 stamps each Sunday evening. The owner moved stamp scanning to a single tablet on the counter, visible to the barista lead, added a “max two stamps per day” rule to the staff brief, and set a 7‑day window for backdated stamps with receipt. The next week, Sunday stamps dropped to a normal level with no customer complaints.
Where a digital wallet stamp card is used, ensure your process mirrors the above: customers present their wallet pass; staff issue the stamp from a store device via a scanner workflow; and exceptions are written in your Terms and staff guide.
Designing a clear, fair policy with customer-friendly exceptions
A short policy is the most cost-effective control you have. Put it where staff can reference it and customers can see the headline rules.
- Eligibility: say what earns a stamp (e.g., “one stamp per £5+ in a single transaction; hot drinks only”). Keep it simple.
- Limits: cap per transaction/day; name any excluded items (e.g., gift cards).
- Proof: a valid receipt or the digital wallet pass must be shown at the time of purchase.
- Backdating: permit late stamps within a reasonable window (e.g., 7 days) with receipt.
- Refunds: stamps from refunded purchases will be reversed or not counted towards rewards.
- Abuse: explain you may remove stamps where misuse is found, but emphasise fairness.
- Exceptions: allow one goodwill stamp per customer per month for tech or battery issues; staff should log it in a simple note.
Keep the tone friendly. Customers remember how you handle edge cases more than the rule itself. Align the policy with your Terms and training notes, and review it quarterly.
Visibility and auditing: what to watch each week
You don’t need a forensic team—just a 10‑minute rhythm. Review:
- Stamps by hour and by staff device: look for outliers (e.g., late-night spikes).
- Top stamp recipients this week: legitimate regulars are fine; sudden newcomers with many stamps need a look.
- Stamps per transaction: if you see a run of doubles, coach the team.
- Exceptions log: ensure goodwill stamps are rare and evenly distributed.
- Redemption rates: if rewards are redeemed but the earning pattern seems odd, dig deeper.
- Referral conversions: match rewards to a “qualifying first visit” definition to deter referral program fraud.
If your loyalty tool provides a customer activity dashboard—Beyond Stamping includes one—use it for these quick checks. When sending SMS reminders or reactivation nudges, ensure you have valid consent and follow applicable direct-marketing rules. Obtain your own legal advice if unsure.
Beyond Stamping note: customers add a branded digital stamp card to Apple Wallet or Google Pay via link or QR, with no separate app or password. Staff can issue stamps using a phone or tablet scanner workflow, and SMS campaigns use pay‑as‑you‑go credit. An optional Referrals add‑on gives customers referral codes and tracks a friend’s qualifying first visit. Current website pricing shows Digital Loyalty at £34.99/month for one branch, extra branches at £10/month, and Referrals at £24.99/month as an add‑on.
Setting up staff scanning without creating friction
- Put the scanning device at the till, in view of a camera or supervisor—avoid roving, personal devices for issuing stamps where feasible.
- Assign responsibility by shift: one person oversees stamp issuance and the exceptions log.
- Keep the customer flow smooth: train staff to ask for the wallet pass promptly (“Any stamps to add today?”) to avoid rework.
- Avoid public QR codes for stamp issuance; reserve any scannable codes for adding the card to a phone, not for granting stamps.
- Do random receipt checks: once per shift, match a handful of stamps to receipts; coach, don’t criticise.
- Record exceptions in a tiny notebook or a shared digital note; review weekly.
These steps address most staff scanning risks while keeping service friendly.
When this may not fit
A wallet-based stamp card is highly practical for most cafés, salons, and takeaways, but it’s not always the right fit.
- Customer base with very low smartphone or wallet usage (e.g., specific senior or offline communities) may be better served by a simple paper card.
- Highly complex earn rules (e.g., tiered points by product category, variable accrual per item) might require a full POS‑integrated points system rather than a simple stamp model.
- Settings where staff have no time or ability to scan (e.g., self‑serve environments without counters) may struggle to enforce the rule that staff, not customers, issue stamps.
If any of the above apply, consider alternate formats or a different loyalty construct.
Quick next steps for owners
Action checklist (print and pin in the office):
- Write your 7‑line loyalty policy with eligibility, limits, proof, backdating, refunds, abuse, exceptions.
- Move stamp issuance to a staff‑controlled device at the till; remove any public stamp QR.
- Set caps: max stamps per receipt and per day; add to the staff brief.
- Start a one‑page exceptions log; allow one goodwill stamp per customer per month.
- Schedule a 10‑minute weekly review: stamps by hour, top recipients, exceptions, redemptions.
- Add a line in your Terms covering “qualifying first visit” to deter referral program fraud.
- Coach once, document once; escalate only if patterns persist.
If you’re comparing tools, look for: wallet compatibility, a staff scanning workflow, a simple activity dashboard, clear pricing, and optional referrals if you plan to run them. Read your Terms alongside any provider guide and seek appropriate advice on direct‑marketing compliance if you plan to send SMS.
What’s a reasonable control at the till that won’t annoy customers?
Keep it simple: one stamp per eligible visit or spend threshold, issued by staff from a store device. Prompt customers early (“Any stamps to add today?”), and add a clear cap (e.g., two stamps per day). Allow one goodwill exception per month per customer, and keep a brief log for transparency.
How do I handle customers who forgot their phone or couldn’t access their wallet app?
State a backdating window (e.g., 7 days with receipt) and one goodwill stamp per month for tech or battery issues. Train staff to note the exception. This keeps honest customers happy while making serial backdating unlikely.
Can I run referrals without opening the door to abuse?
Yes, with clear Terms: define a “qualifying first visit,” disallow self‑referrals, and only issue the reward after the visit is verified. Tools like Beyond Stamping offer an optional Referrals add‑on that gives customers referral codes and tracks a friend’s qualifying first visit; set your rules before launch.