Skip to content

Companies

Costco scams: how the fake messages work

Costco brand-impersonation scams are fraudulent emails, text messages, phone calls, and pop-up surveys that falsely use Costco's name to trick consumers into surrendering personal data, login credentials, or advance fees. Cybercriminals primarily deploy phishing campaigns offering free gift cards, Yeti coolers, or remote employment opportunities to capture credit card numbers and identity data.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by Costco. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the Costco message real?

Unsolicited electronic communications from Costco never ask for personal information such as usernames, passwords, credit card numbers, birth dates, or Social Security numbers. All legitimate emails from Costco originate strictly from a @costco.com domain. The sole exception is Digital Costco Shop Cards, which arrive exclusively from costco@digitalshopcard.costco.com. Costco does not extend job offers via email, messaging app, or text message without prior direct contact, nor does it charge prospective employees application or processing fees. Costco customer service representatives never call customers to demand immediate payment, crypto transfers, or remote access to personal devices.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Survey & Reward Gift Card PhishingEmail / SMS / Pop-upPersonal identifiable information (PII), credit card details for shipping fees, and subscription sign-ups
Fictitious Remote Job OfferSMS / Messaging App / EmailAdvance fees for training/equipment processing, identity theft (SSN/banking details)
Fake Membership Payment FailureEmail / SMSCredit card numbers, account credentials, and billing information
Chinese Member Service Phone ScamPhonePersonal verification data, bank account takeover, or fear-induced extortion
Fake Check & Overpayment ScamPost / MailDirect wire transfer funds or cash from the victim before the fraudulent check bounces
Fake Holiday / Seasonal Survey (Turkey Dinner / Cyber Week)Email / SMSCredit card numbers, recurring monthly membership billing sign-ups, and PII
03

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The sender's email address or reply-to domain does not end in exact lowercase @costco.com (with the single exception of legitimate Digital Costco Shop Cards arriving from costco@digitalshopcard.costco.com).
  • The communication demands an upfront payment, processing fee, or shipping charge to claim a free prize, gift card, or remote employment opportunity.
  • The URL embedded in the message or visible upon hovering contains hyphenated, misspelled, or entirely unrelated domains (e.g., costco-rewards-us.com or costcoclub-support.net) rather than the official costco.com.
  • The message uses extreme urgency, threatening immediate membership termination, police involvement, or loss of rewards unless action is taken within minutes.
  • Phone calls appearing on Caller ID with legitimate Costco warehouse or corporate numbers request sensitive personal identification numbers (PINs), passwords, or remote device access.
04

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • Close the browser window immediately, delete the phishing email or SMS message without clicking any links, and run a trusted antivirus scan if attachments were downloaded.
  • If you gave information (usernames, passwords, or personal details): Immediately change your Costco.com account password and any shared passwords across other financial or email accounts. Enable multi-factor authentication (MFA) where available.
  • Contact your bank or credit card issuer immediately to report unauthorized transactions, freeze or cancel compromised cards, and dispute fraudulent charges. File a formal report via the FTC ReportFraud Portal and IdentityTheft.gov.
  • Disconnect the device from the internet immediately to sever remote attacker connections. Run a full malware scan using reputable security software, and change all online banking and email passwords from an uncompromised device.
05

Where do you report it?

FTC ReportFraud Form for Costco (Online reporting portal recommended by Costco; accessed Aug 07, 2026).

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

06

Sources