An Open Letter To Amazon.comRegarding cancellation of gift cards I have purchased via Purse.io, and sold on Ebay, given as a gift to my mother, and retained on my Amazon account.
BACKGROUND
On June 2, 2014 I read with interest a news article announcing a service that enabled investors and miners in Bitcoin to purchase items on Amazon.com. (
http://www.coindesk.com/purse-io-can-shave-25-bitcoin-buyers-amazon-bills/)
The service, Purse.io, allows users to create wishlists on Amazon which they published to Purse, providing bitcoins that Purse would hold in escrow. People seeking to buy bitcoins would then purchase the items on the Amazon wishlist, having them sent to the wishlist creator. Upon delivery the bitcoins would be released from escrow by Purse.
Many people want to obtain bitcoins but without their own mining rigs or the right know-how and bank accounts linked to bitcoin services after a verification process, they have only risky back-alley means to obtain them. So a service like Purse, which let anyone with a credit card purchase bitcoins from miners like myself at a market premium and with an escrow agent to oversee the transaction, made sense.
I tried the service and found it worked well as described. After several successful transactions I shared my positive experiences with the service on Bitcointalk (
https://bitcointalksearch.org/topic/m.7741028). Respondents raised the topic of fraud and concerns I could be liable for a bidder making an illicit purchase on my behalf, causing me to contact Purse.io. I posted the response I received from Purse.io on the thread on July 15:
...There are many reasons we chose to integrate with Amazon, and one of them is the fact that they have a state-of-the-art fraud detection system and a strong anti-chargeback process.
Sometimes, Amazon cancels even legitimate orders because it looks suspicious to them (i.e. $1,000 gift card order purchased from Brazil to a Spender in Alabama). People who Buy BTC through our site and try to chargeback Amazon will find their attempts fruitless. Amazon will provide evidence that they shipped and delivered the product and will require a return of the items before they issue a refund to the Buyer. They have great relationships issuing and merchant banks, and they do not outsource payments.
On Purse's side, our system ensures that Spenders aren't exposed to fraud. Spenders' BTC aren't at risk because they have to confirm delivery of the item. We are developing capabilities that detect changes in Amazon orders so that we minimize the wait time for Spenders.I was reassured by this response, and by the fact that some of my orders on Purse had been delayed or canceled apparently because of Amazon's anti-fraud systems. This indicated to me that they were successfully weeding out potential illicit purchases. In the meantime I was able to purchase items as well as gift cards on Amazon.com via Purse, and use the gift cards without any hassle. I gave one gift card to my mother for her birthday, and even made a sizable purchase of bitcoin myself on Purse using Amazon gift cards when an arbitrage opportunity arose.
EBAY SALE OF GIFT CARDS
In early August I listed two gift cards for sale on Ebay, as by that point I had confidence that I had valid cards to sell and there was no sign of issues with Purse or Amazon. I researched Ebay's policies and followed them carefully, aware of the reports of scammers who would bid on cards, utilize them and then report to Ebay that they hadn't received the cards or they were invalid. Both cards sold and were shipped and received without issue and everything seemed to be fine.
On September 2 I received a message from Ebay informing me that the buyer of the first gift card had opened a dispute and requested a refund. The buyer reported:
Hello, I entered the gift certificate onto my amazon account. Then this morning I got this email from Amazon.com, containing the following: "The gift certificate you recently attempted to redeem is invalid. Please understand that we cannot reissue it or reimburse you for these funds. Any associated orders have been cancelled. We suggest that you contact the party who sold you the gift certificate to inquire further about their policies for dispute resolution."(In follow-up contact with the buyer, whom I'll call AH, it turns out they were able to deposit the gift card funds to their Amazon account initially and things were fine for about ten days. They even made a small ($7.19) purchase with it, prior to Amazon cancelling the card. So the card was valid, but then Amazon cancelled it.)
MASS CANCELLATION OF GIFT CARDS
I looked up the serial number information I had retained on the gift card in question and logged into Amazon.com to contact Amazon support. That's when I noticed that Amazon had also cancelled all of my own gift card funds on my own account. This included three cards, all purchased (to the best of my recollection) by separate bidders on Purse.io. The cancellations occurred on August 27, with no email or other form of notification to me of the action being taken despite passage of almost a week.
After my initial contacts with Amazon customer service on Sept. 2, Amazon confirmed that the card I sent to AH was redeemed by an account matching the name to whom I shipped the card. They did not respond to my inquiries regarding my own canceled gift cards. On Sept. 3 I received updates from AH via the Ebay message system, as they were separately following up with Amazon:
Hi again, Here is what Amazon said in response. Could you take a look at this message and see if there's anything you can do to resolve it with amazon? Hello, I'm following up on your recent contact to our Customer Service department and I'm very sorry to hear about the trouble you've had trying to use your $200.00 gift card. I've checked our records, and the claim code you received from [REDACTED - call her CC] there appears to be a problem with the purchaser's account and the gift card is indeed not available for use. I regret that for security purposes I'm unable to provide you with any further information. Therefore, I recommend contacting the person who bought the gift card for more information. If they feel this is an error please have them contact us with directly with this matter. For your reference, please visit the following link for the gift certificate fine print: http://www.amazon.com/gc-legal.I vaguely recalled the ""CC" in the quote above, because each item shipped from Amazon from a wishlist includes a slip of paper noting that it is a gift and gives the name of the person sending it.
From this information it is becoming apparent that something like the following has happened:
1. A "bad actor," either CC or a thief using her identity made the gift card purchase on Amazon, to receive BTC from Purse.
2. Amazon accepts the payment from CC; Amazon and perhaps credit card or other corporate payment systems anti-fraud detection fail.
3. I received the gift card and confirmed delivery to Purse, releasing my escrowed bitcoin.
4. Then I resold the gift card to AH on Ebay, receiving payment via Paypal.
5. Weeks
after the purchase in step 1, Amazon identifies it as fraudulent and cancels the gift card. AH has a dead card they've paid for, and I'm caught in the middle having paid for it as well but with my reputation at Ebay on the line.
CLUES FROM PURSE
All this shed light on an exchange of emails I had with Amazon and Purse on August 22-25, after the Ebay sale of the gift cards. On August 22 I had received a cryptic email from Amazon stating:
The gift certificate you recently attempted to redeem is invalid. Please understand that we cannot reissue it or reimburse you for these funds. Any associated orders have been cancelled.That was odd because I hadn't attempted to redeem a gift card at that point, and my Amazon account showed nothing amiss with my previous gift cards. Nor had I heard anything from my Ebay buyers as I might expect if they were having problems. So my initial reaction was that someone must have bid on one of my Purse.io wishlists but sent the gift card to themselves. (I knew from my own experience that you can deliberately or accidentally ship a wishlist item to your own address quite easily.) I figured someone shipped themselves a gift card from my wishlist and tried to redeem it (perhaps with an ill-conceived idea of trying to wrest the escrowed bitcoin in Purse from me in a dispute.) So I contacted Purse.
In a response asking for more details, one of the operators of Purse made a remark that I shouldn't buy gift cards using Purse. I asked why (I had noticed a large proportion of Purse listings were for gift cards all summer) and another Purse rep explained that Amazon had a high rate of cancellations for gift card purchases, especially those of higher value. I was beginning to experience that myself at Purse, as multiple listings I had made for gift cards on Purse were seeing their orders canceled by Amazon. The last gift card I received via Purse arrived on August 19. For obvious reasons I've discontinued use of Purse for at least the time being. But Purse never mentioned the risk of gift cards being revoked after shipment or of any other issue to be concerned with in this case.
In any event, Purse did not confirm anything relating to the August 22 email from Amazon, leaving it unexplained. This morning AH provided a screenshot of their gift card account at Amazon, in Ebay's dispute resolution center. It shows that AH deposited the gift card I sold them to their account on August 22 without issue. They then made a purchase with the card's funds on August 28, and then the funds were canceled on Sept. 2. So it's still unclear whether Amazon's email to me on August 22 relates to AH's card or something else entirely. If AH's use of the gift card on Aug. 22 triggered the warning email to me, why was it accepted into AH's account such that they could use it?
CURRENT STATUS
I'm still awaiting a reply from Amazon as to the cancellation of gift cards in my own account. In my responses to AH I've reassured them that regardless of what Amazon does, I believe the right thing to do is to reimburse them myself as the cancellation of the gift card was no fault of their own and they should not held responsible for the actions of another bad actor. I am hopeful that the same logic will apply to myself.
SHOULD INNOCENT PARTIES BE MADE TO PAY FOR OTHERS CRIMES?
As I understand it (not being a lawyer), when a crime is committed, stolen property can be retrieved to be returned to the rightful owner. To that extent I can understand and appreciate Amazon's actions that they are acting in good faith, perhaps on behalf of a credit card company that suffered a loss due to a stolen credit card.
However, (in this illustration) it was the credit card that was stolen, not the gift card or the bitcoins or the funds in Paypal. An organization like a pawnshop understands the risks of dealing with potential stolen property and builds that risk into their business model and profit margins. But suppose someone stole a credit card, bought a watch with it, pawned the watch, and then the pawnshop sold the watch to Buyer A, who then traded it for a cell phone with Buyer B.
Should the police confiscate the cell phone and give it to the original victim? Or the watch? As innocent parties it seems to me the police would be engaging in a shell game of trading the injustice around if they did that. It is the thief who should pay, not downstream parties.
Otherwise, consider that every dollar bill in our pocket or in our bank account may be (or likely is?) downstream of some illicit activity to which we are entirely innocent. To say law enforcement can confiscate those funds undermines the faith people have in that currency. Does Amazon appreciate how unilateral revokations of gift cards obtained legitimately, as in the case of AH and my mother and I and so on, will undermine the legitimacy of their gift cards?
DOING THE RIGHT THING
After some initial anguish, I decided that regardless how things pan out with Amazon, I would not "spread the injustice around" and stiff my Ebay buyers. If the gift cards remain revoked I will refund AH the amount that Amazon revoked from them myself. This despite the fact that Amazon initially accepted their card, which I believe would give me an excellent case in Ebay's dispute system to fend the case off without a refund. It would be hypocritical of me to do otherwise, as I believe Amazon should treat me and others in a similar situation likewise.
AMAZON CAN LEARN A LESSON FROM MINTPAL AND VERICOIN
One of the cryptocurrencies I am invested in besides bitcoin is Vericoin. On July 13, 2014 the cryptocurrency exchange Mintpal was hacked. 30% of all vericoin in existence were stolen from their vault, with a value at the time of around $2 million dollars. (
http://www.coindesk.com/bitcoin-protected-vericoin-stolen-mintpal-wallet-breach/)
A cryptocurrency such as vericoin or bitcoin basically exists in the form of an accounting ledger distributed across the internet. The ledger is broken down into "blocks" containing all the transactions for a given chunk of time. The entire ledger is known as the blockchain, with new blocks being constantly added to record ongoing transaction activity. The fact that you "own" a bitcoin or vericoin is established by its being recorded in the blockchain.
In response to the theft the vericoin development team orchestrated a "rollback." This involved truncating the blockchain back to just prior to the point of theft and then restarting blockchain activity with new blocks lacking the theft transaction. It's as if a band of bank robbers were fleeing down the street with bags full of cash and then - POOF! - the cash magically teleports back into the bank vault, leaving them empty-handed.
Except that it isn't just the bank robbers who lose their haul. At the grocery store a lady walks out with her groceries, but the grocer sees the funds from the debit card she just used, vanish. Money taken from an ATM that morning vanishes from a church offering plate. A wire transfer from the bank to purchase stocks is revoked, leaving the stock broker in the lurch. Not good.
But in the case of vericoin, the original blockchain could still be used as a reference - it records ALL transaction activity. As a result, Mintpal worked with the vericoin team and announced:
We have committed to our customers and to all [other] exchanges that we will cover any losses faced as a result of the rollback.Mintpal was able to reassure vericoin investors that no one but themselves would be defrauded by the rollback. They took on the burden of the theft themselves rather than trying to escape responsibility for inadequate security. Amazon, take note!
CONCLUSION
In conclusion I request that Amazon reinstate the gift cards I have purchased, including those provided to AH (not to mention my mother, etc.) We are not the guilty party and should not be defrauded, and Amazon is trying to close the barn door weeks after the horse has been stolen in this case. This concerns funds tallying around $950 in my case. Think I will ever touch Amazon.com with a 10-foot pole or speak well of it to others if the cards I bought are canceled?
I would also recommend that they cooperate pro-actively with Purse.io management to improve their anti-fraud methods
without defrauding their customer base. For example, a delay could be introduced in the escrow system dependent on triggers from Amazon to confirm when funds used to make a purchase have truly cleared on their side.
I ask that Purse.io take the initiative in working with Amazon on this to protect their own customer base and defeat fraudulent activity, and that they provide some warning to users on their website as to the kinds of problems that users such as myself are encountering. Warning users of the risks will protect themselves in the long run.
POSTSCRYPT: THE BITCOIN ADVANTAGE
I must also point out that this entire situation would likely not exist if Amazon simply followed the lead of thousands of other companies like Dell, Overstock and DISH and began accepting bitcoin directly. Although bitcoin is the target of a good deal of fraudulent scams, the fact that bitcoin transactions are direct between buyers and merchants means the merchant is free of the entanglements and headaches that frauds with traditional 3rd party payment systems like credit cards involve.
Bitcoin frauds target the holder of the bitcoins themselves, so all Amazon would be concerned with is securing its own bitcoin accounts. There
are no issues with chargebacks, counterfeiting, bounced checks, and the like. There is no weeks of delay to confirm a transaction or learn that it was executed fraudulently. (Confirmations take 30-60 minutes with bitcoin, or near instantly using methodology such as is implemented at Bitstamp.) The result would be major cost savings and improved customer satisfaction as well as faster flow of funds to and from Amazon.