AI Gift Card Scam Sparks Concern as Money Vanishes Without OTP or Alerts in Growing Cyber Fraud Trend

A disturbing cyber fraud pattern linked to AI platforms is now emerging, where users are losing money without receiving any OTP or direct warning. What makes this scam even more alarming is that transactions are being carried out without clicking suspicious links or approving any additional verification.

Artificial intelligence tools like ChatGPT, Google Gemini and Claude have become part of everyday life, helping people with work, learning and quick answers. But the same popularity is now being exploited by cybercriminals, who have developed a highly deceptive gift card scam using these platforms as a cover.

The scam usually begins when a user subscribes to an AI service using a credit card. After that, attackers somehow gain access to the account and start making repeated purchases of expensive gift cards. These transactions often happen silently in the background without any OTP or secondary authentication, making them extremely difficult to detect in real time.

What makes the situation even more confusing is the way these transactions appear on bank statements. They often look like normal subscription charges from legitimate services such as OpenAI or Google Gemini. Because of this similarity, neither the user nor the bank immediately suspects fraud.

In several reported cases, confirmation emails for the gift card purchases are sent directly to the user’s registered email address. This tricks users into believing the activity is part of a promotional offer or routine service update. Instead of a single large withdrawal, scammers split transactions into multiple smaller ones, avoiding bank fraud detection systems for a longer time. Many victims only realise something is wrong after several days, when charges continue to appear on their accounts.

Cybersecurity experts believe that weak email security or compromised credentials may be playing a key role in these incidents. In some cases, attackers may be gaining indirect access rather than breaching core payment systems of AI companies.

Companies like OpenAI and Google have responded by stating that their primary payment systems remain secure and have not suffered any major breach. However, they have acknowledged the need to monitor suspicious transaction patterns more closely and have assured users that refunds will be processed in verified fraud cases.

To stay protected, experts strongly advise users to regularly review bank statements and immediately flag any unfamiliar AI related charges. Enabling two factor authentication for AI accounts and email services can significantly reduce the risk of unauthorised access.

It is also recommended to set limits on international and online card transactions to prevent large unauthorized deductions. In case of any suspicious activity, users should quickly report it to the service provider and contact their bank to block or secure their card.

As AI continues to expand in daily life, this growing fraud trend highlights how digital convenience and cyber threats are now evolving side by side, making awareness the strongest defence for users.