Can customers or staff cheat a digital stamp card? Fraud controls explained (2026)

The question comes up in every conversation about going digital: can it be cheated? The honest answer is that a digital stamp card, or loyalty card as we call it, removes the ways customers cheat and makes the ways staff cheat visible. It does not make fraud impossible, and any vendor who says so is selling. This guide is written by Stampioo, so the specific controls described are ours; the principles apply to any tool where staff stamp a card in a customer’s phone.

What paper cards allow

A paper stamp card is secured by a rubber stamp. Anything that looks like the stamp counts: a pen, a similar stamp bought online, a photocopy of a full card. Cards are swapped between friends, found on the floor and handed in by someone else, and brought back for a second reward after a lenient member of staff forgot to take the full card. None of this shows up anywhere, because paper keeps no record. Most small businesses accept the loss as the cost of running a programme, which is reasonable while the reward is a coffee and unreasonable once it is a free haircut.

What a digital card stops

With Stampioo the customer’s card is a pass in their phone: a loyalty card in Apple Wallet and Google Wallet with its own QR code, saved once by scanning your code at the counter, with no app and nothing for the customer to log in to. That one design choice is what removes the customer-side cheating below.

• Self-stamping. The customer’s card shows a QR code, and that code only identifies the card. There is no customer-side action that adds a stamp. A stamp is added when staff open the scanner, scan the code and confirm.
• Copied and photocopied cards. Each card belongs to one customer and lives in Apple Wallet or Google Wallet on that phone. There is nothing to photocopy; a screenshot of the QR code just opens the same card (more on that below).
• Borrowed cards. A card can only be shown from the phone it is saved on, and the stamps on it are attributed to that customer. Friends cannot pool stamps across cards.
• The stolen rubber stamp. There is no stamp. The only thing that adds stamps is a staff login, and a login can be removed in a minute if a phone goes missing or someone leaves.
• The full card used twice. When a card is full and the reward is redeemed, the scanner records it and a new card starts automatically. The old one cannot be redeemed again.

What a digital card does not stop

A member of staff can scan a friend’s card and add a stamp the friend did not earn. They can do the same with a regular they like, or with their own card on their own phone. No digital stamp card prevents this, because the whole model relies on staff deciding when a stamp has been earned. Hardware does not change it either: a tap-to-stamp device at the counter is operated by the same people.

What changes is visibility. On paper, a stamp given to a friend is identical to any other stamp. On a digital card, every stamp carries the time it was added, the location it was registered at and the account that added it. A pattern, say twenty stamps from one account between eleven and midnight on Fridays, is a line in a list rather than a rumour.

The three controls that close the gap

1. 1

   Separate logins for every team member

   Do not share one login across the team, because then every stamp looks the same again. With Stampioo every person signs in with their own account: up to 3 team members on Starter, 10 on Pro and unlimited on Enterprise, owners included. The Staff role can stamp cards and look up customers but cannot change the programme, see reports or touch billing. If someone leaves, remove the account and their phone can no longer stamp.

2. 2

   A written stamping rule in the card terms

   One stamp per visit, or one per item? A stamp for a coffee bought for a colleague, or not? A minimum purchase? Decide, write it in the terms the customer sees on the card, and tell staff the same thing. Most arguments at the till are about an unclear rule, not about fraud. In the Stampioo scanner, staff choose how many stamps to add before confirming, so a rule that allows four stamps for four coffees is one scan.

3. 3

   Look at the activity log

   Every stamp, correction and reward is recorded with time, location and account, and stamps added afterwards from the customer list carry a reason that only your team sees. Once a month, open the analytics and the customer list: how many stamps each location gave out, which cards are filling fastest, and whether anything looks odd. Five minutes a month is enough for a single café. Nobody needs to be told they are being watched; the fact that the log exists is usually enough.

Screenshots and shared QR codes

A customer can screenshot their card’s QR code and send it to a friend. What happens when the friend shows it? Staff scan it, the customer’s card opens, and if staff add a stamp it lands on the original customer’s card, not the friend’s. The friend has bought the original customer a stamp. That is the same as a friend paying for your coffee, and it is not a loss to you. What a screenshot cannot do is add a stamp on its own, because a scan only reads the code; the stamp is still a decision by the member of staff who sees the card and its stamp count on screen.

The one scenario worth a rule is a card that is shown by many different people to collect one reward faster. If that bothers you, say in the terms that the card is personal, and let staff decline a stamp when the person showing the card is obviously not the cardholder. In practice this is rare, because the reward is small and the effort is high. In the Stampioo scanner, staff see the card’s current stamp count and history on screen before they confirm, so an unusually fast card stands out at the till, not just in a report.

Double stamping and forgotten stamps

Double stamping is a rule question, not a fraud question. If your rule is one stamp per visit, staff add one; if it is one per item, they add the number of items. Stampioo does not enforce a minimum time between two stamps on the same card, and it does not use single-use codes. Flex Rewards, a browser-based loyalty card, advertises both: single-use codes and a minimum gap between scans. If that matters more to you than a Wallet card, it is a fair reason to look at Flex. We think staff-only stamping plus the log covers the small-business case, and that a minimum gap gets in the way of the customer who buys for the whole office. The other direction is more common: a forgotten scan. Stamps can be added afterwards from the customer list with a reason such as “forgot to scan”, and mistakes are undone under Corrections in the scanner. Both are logged.

The limits of any system

• Staff collusion: two people covering for each other is hard to catch with any log. Separate logins and an occasional look at the numbers make it costly, not impossible.
• Generosity: the member of staff who gives an extra stamp to a nice customer is not committing fraud, and most owners would rather have that than the opposite. Decide how much slack you accept and say so.
• Lost phones: a card is as safe as the phone’s lock screen. If a customer loses their phone, they scan your QR code on the new one and staff put the stamps back, with a reason in the log.
• The reward itself: the more valuable the reward, the more a loose rule costs. A tenth coffee free can afford some slack; a free colour treatment cannot. Scale your attention to the reward.

If you are still on paper, the switch removes the customer-side cheating in one go; our guide on moving from paper stamp cards to digital covers how to carry existing stamps over. Plans start at €29 a month excluding VAT; see what each plan includes.