Why stolen credit cards end up buying game currency

The card is stolen. The game currency is the exit.

A stolen credit card number is useful to a fraudster only if it can be turned into something they control before the payment is stopped.

Game currency can fill that role.

A payment for Robux, game gold, a tradable key or another digital asset can be approved in seconds. The purchased value appears immediately inside an account. In some games it can be gifted or traded; in others, an item bought with the currency or the account itself can be sold elsewhere. A third-party buyer then pays for an asset that is no longer directly attached to the stolen card.

That conversion is why compromised cards repeatedly appear around virtual economies. The game is not necessarily the objective. It can be the bridge between stolen purchasing power and an asset somebody else will buy.

The Consumer Financial Protection Bureau’s review of video-game economies describes gaming assets as stores of value that can move through platform markets, player-to-player transfers and third-party systems. It also warns that the ability to transfer or convert those assets creates opportunities for fraud and money laundering.

The pattern is concrete enough that game companies have disclosed it themselves.

Why game currency is attractive to payment fraud

The useful properties are mostly the same ones that make in-game purchases convenient for legitimate players.

Property	Why it matters in fraud	What limits it
Instant delivery	Value can appear before an unauthorized charge is noticed and disputed.	Publishers can later reverse purchases or remove items.
Digital inventory	There is no physical package to store, ship or resell.	Accounts and transactions still leave records.
Transfer or resale demand	Currency, items or accounts can sometimes be moved to another player or sold.	Many games restrict transfers and unauthorized marketplaces.
Familiar small purchases	Microtransactions are a normal part of many games.	Payment systems monitor suspicious activity and repeated abuse.
Global player base	A digital asset may have buyers far outside the cardholder’s location.	Regional controls, authentication and account restrictions can interrupt the flow.

Stripe’s current guide to gaming fraud describes stolen cards being used to buy virtual currency or tradeable digital goods, followed by rapid gifting, trading or resale. The chargeback can arrive after the asset has moved.

This is less like stealing a game and more like buying a liquid digital good with somebody else’s money.

Official cash-out is not required

A game currency does not need a built-in “withdraw to bank” button to be useful in this kind of fraud.

The CFPB found that many games do not provide official cash-out, while third-party markets still let players sell currencies, items or entire accounts for conventional money. A closed-loop currency can therefore acquire an unofficial exchange rate simply because other players are willing to buy it.

A publisher can truthfully say its currency has no authorized cash value outside the platform while an unauthorized resale market exists around it.

The currency is only one possible layer. A fraudulently funded account can buy a valuable item. The item can be transferred. The account can be sold. Different games expose different paths.

What matters is convertibility in practice, not necessarily convertibility in the official rules.

That is also why marketplace design matters. Our explainer on how Steam’s Community Market connects inventories, listings and wallet balances covers one legitimate version of a virtual marketplace. Fraud risk appears when transferable value meets unauthorized funding or unauthorized resale.

Roblox has described the pattern in its own filings

Roblox provides one of the clearest public examples because the company has discussed the problem in filings with the U.S. Securities and Exchange Commission.

In its 2025 annual report, Roblox says some users have fraudulently used credit cards owned by other people to buy Robux and then offered that Robux for sale at a discount on third-party websites.

That is almost the entire model in one line:

stolen card value → Robux → discounted third-party sale

Roblox also says Robux has no authorized market or application outside its platform, and that it monitors third-party sites and unauthorized transactions. The prohibited market still exists around the official one.

For the year ended December 31, 2025, Roblox reported that total chargebacks and refunds — only some of which may have been fraud-related — were approximately 2.5% of bookings. That figure is not a fraud rate. It shows the scale at which payment reversals can matter to the business.

Its current Community Standards explicitly prohibit using stolen or false payment methods for Robux, abusing chargebacks, and using third-party services to buy or sell Robux.

The official rules and the illicit market are two different economies sitting around the same digital asset.

Valve removed transferability when fraud networks found a useful asset

Sometimes the cleanest anti-fraud move is not better payment screening. It is making the purchased asset harder to move.

Valve did exactly that with Counter-Strike: Global Offensive container keys in 2019.

In its Key Change announcement, Valve said fraud networks had shifted to using CS:GO keys to liquidate gains. The company made newly purchased keys non-tradeable and non-marketable while leaving their normal use — opening containers — intact.

The decision exposes the core economics. The key was useful to fraud networks because it could leave the purchasing account and enter a market. Once Valve removed that portability, it preserved the legitimate consumption use while damaging the resale use.

Game currency becomes attractive for the same reason when it can move beyond the original purchase: portability creates a liquidation path.

The chargeback can arrive after the digital value has moved

The timing mismatch is central.

A card payment can be approved quickly. A cardholder may not notice an unauthorized transaction until later. When they report it to their issuer, the payment can enter the chargeback process.

By then, the game currency or item may already have been transferred, spent or sold.

Epic’s current Fortnite chargeback policy shows the publisher-side response. When a cardholder disputes a payment, Epic says it removes purchased items associated with the chargeback and prevents the disputed card from being used again across Epic products. Accounts with repeated chargebacks can also face purchasing restrictions.

The fraudster does not need the original payment to remain permanent if the purchased value has already been moved somewhere else.

The loss can then spread across several parties:

• the cardholder has an unauthorized transaction to dispute;
• the game company can lose the payment after digital goods have already moved;
• the merchant can absorb dispute costs and increased fraud controls;
• an innocent buyer of discounted currency or a resold account may later lose the asset or account;
• creators or marketplace participants can be caught in reversals or enforcement tied to tainted transactions.

This is the same accounting split that appears in ordinary online commerce: the original sale amount and the money a merchant ultimately keeps are not always the same. Our guide to where the money goes after an online sale explains that distinction from the merchant side.

Cheap game currency is not automatically stolen

A suspiciously cheap offer is a warning sign, not proof of stolen-card fraud.

Prices can legitimately differ because of official promotions, gift-card discounts, platform pricing or a seller accepting a lower margin on a legitimately acquired asset. Illegitimate supply can also come from other sources, including hacked accounts, stolen items, botting or scams that simply take the buyer’s money.

The useful question is not whether every third-party deal is fraud. It is what economic reason lets this seller undercut the official price?

If that answer is unclear, the buyer is taking more than pricing risk. The underlying currency or account may be tied to an unauthorized payment that can later be reversed or punished.

Epic warns players that it does not partner with third-party V-Bucks sellers and says unauthorized offers can expose users to lost money or compromised accounts. Roblox likewise prohibits third-party Robux trading outside the exceptions it expressly allows.

A deep discount can be the point where fraud proceeds meet a bargain-seeking legitimate buyer.

Why publishers care even when the cardholder gets their money back

From the player’s perspective, a successful chargeback can look like the end of the story.

For the game company, it is not.

Fraud can create a payment reversal after the company has already issued digital value. It can generate dispute costs, customer-support work and false positives that make legitimate purchases harder to process. At sufficient scale, fraud and chargeback rates can also damage a merchant’s relationship with card networks and payment processors.

Roblox says in its annual report that failure to keep fraud and chargeback rates at acceptable levels can lead to card-network fines, lower card-approval rates and additional authentication requirements.

That is why anti-fraud controls affect more than the checkout screen. Publishers can restrict gifting, delay transfers, limit marketplace access, remove assets after a chargeback or make certain purchases permanently bound to one account.

Valve’s CS:GO key change is the clean historical example: a fraud problem changed the rules of a virtual item.

Game currency is useful because somebody else wants it

The phrase “money laundering through video games” can make the mechanism sound more exotic than it is.

The underlying economic idea is familiar: stolen purchasing power is used to acquire something liquid, then that asset is sold to a different buyer. The Federal Reserve Bank of Kansas City has described stolen-card purchases of in-game currency followed by discounted resale as a recurring gaming-payments fraud pattern.

Game economies happen to contain digital assets with several useful traits: they can be delivered quickly, they can carry recognizable value, they may be transferable, and large player communities create demand for them.

Not every game supports all of those traits. Not every unauthorized purchase becomes money laundering. And not every grey-market transaction is criminal.

But when a game asset can move from card payment to digital value to third-party buyer, it can become a conversion layer for fraud.

That is why stolen credit cards sometimes end up buying game currency. The currency is not valuable to the thief because it buys a skin.

It is valuable because, somewhere else in the market, somebody is willing to buy the currency.