Gift cards are easy to send and easy to mess up. The checkout click is rarely the problem. The real trouble is a fake listing, a fee buried in the terms, or a PIN screenshot that someone else already spent.
Can you keep that code private?
Yes. Stick to the brand or a major U.S. retailer, pay with a credit card you can dispute, and send the code through the site's own email tool.
What the federal gift-card rule actually covers
U.S. store cards, gift certificates, and general-use prepaid cards sit under the CFPB's gift card requirements in Regulation E. Fees must appear on or with the card. That includes dormancy, inactivity, and service charges.
That rule does not police a random marketplace seller. A region-locked store balance still fails in the wrong country. A staff holiday card is still a payroll question, not a CFPB fee question.
Thing is, one purchase can touch three systems: the CFPB disclosure rule, the store's own policy, and your credit card's dispute process. The seller's honesty isn't in that list.
How gift-card scams usually start
Pressure plus a prepaid code is the tell. The FTC's gift card scam guidance still shows the same pitch in new clothes. Someone claims a tax bill, a relative in trouble, or a bargain that disappears if you do not buy cards in the next ten minutes. They want Visa, Steam, or store codes.
If someone wants you to pay with gift cards, stop. Real companies and government agencies don't collect that way.
Common traps:
- A caller who tells you to buy cards, then read the numbers
- A too-cheap listing, or a chat that wants the e-gift forwarded
If you already handed over codes, contact the issuer and keep the receipts. Don't buy a second batch to "fix" the first.
Fees you should read before you pay
Many open-loop Visa or Mastercard gift cards still add a purchase fee or an inactivity fee after the card sits unused. You still have to read it.
Federal rules make those fees disclosable. They don't make every card cost the same. To be honest, a store card from the merchant's own site is often the cleaner buy.
A lot of people hunt for one national online-versus-store fee they can memorize, and there isn't one, because the issuer, the retailer, and whether the card is reloadable all change the price, so the only figures that matter are the ones on your checkout screen and in the cardholder agreement.
Before you click pay, run this check:
- The domain is the real retailer or brand, loaded over HTTPS
- You can see the amount, any purchase fee, and whether the card is store-only
- You know how the recipient gets the code: email, text, or print-at-home
- You will save the order confirmation
A simple order of operations for a digital card
You don't need a special app. This sequence keeps the PIN under your control.
- Open the brand site or a major U.S. retailer you already use, and type the address yourself.
- Pick the amount you actually want to give.
- Skip third-party discounts that look too cheap.
- Use the site's message or photo field if you want a personal note. Don't paste a code into that box if the site generates it after payment.
- Enter their email, or yours if you'll forward it.
- Pay with a credit card when you can. Debit is harder to unwind.
- Wait for the confirmation and delivery email before you announce the gift. If you send a separate hello, leave the full PIN out of group chats.
Personalizing without leaking the PIN
A photo or a short sentence in the retailer's gift email is enough for most people who just want a name on the note. Keep printable designs free of the live PIN.
Store cards, open-loop cards, and game codes
An Amazon or Target card spends inside that store, and a lot of those balances refuse to follow someone abroad. Ask which store they actually use.
Open-loop Visa or Mastercard gift cards can work at more merchants after the recipient follows the issuer's activation steps. They also tend to carry more fees.
Game platforms such as Steam, Roblox, and Apple want the code bought from their store or an authorized seller, then redeemed in the recipient's own account. Sharing a login risks a lockout.
Physical cards still work if you like wrapping paper, though mail is slower, and anything you found in a drawer needs a balance check on the issuer's official site before you put a bow on it.
Turns out the "instant" part only helps if the code is still unused. A screenshot in a family text is still a code sitting in the clear.
Personal gifts vs cards from an employer
For a birthday card to a friend, the IRS gift tax FAQs treat ordinary amounts under the annual exclusion as a non-event for most households. A $50 card is not a filing project.
Very large gifts to one person in a year can still require Form 709. Use the IRS page for the current exclusion amount, because Congress changes it.
If you are the employer, the analysis flips. The IRS treats gift cards as cash equivalents. De minimis fringe benefits exclude cash and cash equivalents. A holiday card to staff is generally taxable wages on Form W-2. It is not a silent thank-you that never hits payroll.
If the balance is wrong, missing, or stolen
Start with the issuer's own balance tool, not a random "check my gift card" ad, and have the claim number ready. Save a screenshot of the balance.
If you paid by credit card and the seller never delivered, use your card's billing dispute process. That path isn't the CFPB fee rule. If a scammer took the codes, tell the issuer and follow the FTC steps.
For a bank-issued prepaid problem that the issuer will not fix, a CFPB complaint is the later escalation. Keep the order email, the delivery message, and any seller chat.
If you are buying today, open the merchant's own gift-card page, read the fee line, and send a small test to yourself first when the amount is large. That $10 test is cheaper than a dead $200 code.