{"id":5878,"date":"2026-06-29T13:46:37","date_gmt":"2026-06-29T12:46:37","guid":{"rendered":"https:\/\/adega.ch\/unkategorisiert\/pos-fraud-and-how-to-prevent-it\/"},"modified":"2026-07-21T19:40:54","modified_gmt":"2026-07-21T18:40:54","slug":"pos-fraud-and-how-to-prevent-it","status":"publish","type":"post","link":"https:\/\/adega.ch\/en\/insights\/pos-fraud-and-how-to-prevent-it\/","title":{"rendered":"POS Fraud and How to Prevent It"},"content":{"rendered":"\n

SECURITY REPORT | RETAIL<\/mark><\/strong><\/p>\n\n

Methods, Patterns, and Safeguards for Retail<\/em><\/p>\n\n

POS fraud is not a random act \u2014 perpetrators are well-prepared, understand processes, and deliberately exploit weaknesses in procedures and human behavior. The following compilation presents real, documented cases and supplements them with other known patterns that checkout staff should be aware of. <\/p>\n\n

Part 1: Documented Fraud Cases<\/h2>\n\n

1. Fictitious Double Charge via Twint<\/h3>\n\n

Category: Digital Payment | Risk: Medium<\/strong><\/p>\n\n

The fraudster claims their Twint account was double-charged and demands a refund directly at the checkout. The alleged double charge does not exist \u2014 the amount is credited without any prior charge having occurred. <\/p>\n\n

2. Return Booking via Third-Party QR Code<\/h3>\n\n

Category: Social Engineering | Risk: High<\/strong><\/p>\n\n

A person poses as an accountant or POS technician and demands that a return transaction be processed. The cashier believes they must immediately assist the caller because the caller creates time pressure through their knowledge of the subject matter and by citing deadlines or closing dates. <\/p>\n\n

The fraudster demands information from the cashier to enhance communication. By providing item numbers or EAN codes retrieved from the online shop, the fraudster ensures that the cashier generates one or more return receipts for these items. The refund for the returns requires a refund account. The refund account is transmitted as a QR code to the cashier’s smartphone via SMS, MMS, WhatsApp, or other messengers \u2014 the credit goes to the fraudster. <\/p>\n\n

3. Receipt Cancellation After Cash Payment<\/h3>\n\n

Category: Internal Fraud | Risk: High<\/strong><\/p>\n\n

The checkout staff cancels the receipt after the customer has paid the subtotal and does not request a receipt. The transaction remains incompletely booked \u2014 the collected cash is embezzled. <\/p>\n\n

4. Return with Inferior Third-Party Goods<\/h3>\n\n

Category: Return | Risk: Medium<\/strong><\/p>\n\n

The fraudster buys an item at a regular store, obtains a cheaper or defective product of the same type online or from discount retailers, and returns it after the return period \u2014 along with the original receipt for the newly purchased item.<\/p>\n\n

5. Hidden NFC Debit in a Crowd<\/h3>\n\n

Category: NFC \/ Contactless | Risk: Medium<\/strong><\/p>\n\n

Using a payment app and a prepared shopping cart, the perpetrator holds their smartphone to strangers’ contactless cards in queues or on public transport and triggers a payment before the cardholder can react.<\/p>\n\n

<\/p>\n\n

Other Known Fraud Methods<\/h2>\n\n

6. Not Scanning Items (Sweethearting)<\/h3>\n\n

Checkout staff or a distracted team allows items to pass through unscanned \u2014 intentionally or due to distraction. Often combined with intense conversation to keep the cashier occupied. <\/p>\n\n

7. Swapping or Covering Price Labels<\/h3>\n\n

The perpetrator attaches labels from cheaper products to high-priced items or prints fake barcodes that trigger an incorrect price at the checkout.<\/p>\n\n

8. Change Trick (Quick-Change)<\/h3>\n\n

The perpetrator confuses checkout staff by rapidly exchanging banknotes and asking targeted questions to get more change than was paid. Typically used during stressful moments or when there is a rush. <\/p>\n\n

9. Return with a Forged Receipt<\/h3>\n\n

Original receipts are copied, altered, or found in the trash. These are then used to claim returns for items never purchased from the retailer. <\/p>\n\n

<\/p>\n\n

Part 3: Recommendations for Daily Checkout Operations<\/h2>\n\n
    \n
  • Always process refunds only through official channels and with supervisor approval \u2014 never to third-party QR codes or accounts. No refund without merchandise. Staff must be trained. <\/li>\n\n\n\n
  • For Twint and other apps: Payment is only complete when it is confirmed green in your own POS system.<\/li>\n\n\n\n
  • Always document returns with the original receipt and by checking the item’s condition \u2014 take photos if suspicious.<\/li>\n\n\n\n
  • Consciously perceive attempts at distraction: process transactions calmly, structured, and without haste.<\/li>\n\n\n\n
  • Alleged technicians or accountants without prior notice: immediately inform supervisors, do not process any transactions.<\/li>\n\n\n\n
  • Establish regular training and clear escalation paths within the team<\/li>\n<\/ul>\n\n

    <\/p>\n\n

    This report is aimed at retail employees for awareness. In case of concrete suspicion of fraud: inform supervisors and, if necessary, involve law enforcement authorities. <\/em><\/p>\n\n

    Are you aware of other fraud cases at the checkout? Email us at the following address: Administration+Sicherheit@adega.ch. <\/p>\n","protected":false},"excerpt":{"rendered":"

    SECURITY REPORT | RETAIL Methods, Patterns, and Safeguards for Retail POS fraud is not a random act \u2014 perpetrators are well-prepared, understand processes, and deliberately exploit weaknesses in procedures and human behavior. The following compilation presents real, documented cases and supplements them with other known patterns that checkout staff should be aware of. Part 1: […]<\/p>\n","protected":false},"author":2,"featured_media":5880,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[33],"tags":[],"class_list":["post-5878","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insights"],"p4r_i18n":{"lang":"en","trid":17287},"acf":[],"_links":{"self":[{"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/posts\/5878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/comments?post=5878"}],"version-history":[{"count":1,"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/posts\/5878\/revisions"}],"predecessor-version":[{"id":5883,"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/posts\/5878\/revisions\/5883"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/media\/5880"}],"wp:attachment":[{"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/media?parent=5878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/categories?post=5878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adega.ch\/en\/wp-json\/wp\/v2\/tags?post=5878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}