When you’re selling artwork in person and accepting payments on-site, the convenience of mobile payment systems is great—but so are the fraud risks.
Below is an updated overview of relevant threats (including credit card fraud, charge-back schemes and “cash back”-type manipulations) followed by five actionable strategies you can implement at your booth to protect yourself and your revenue.
Key Fraud Risks You Should Know
Here are fraud and transaction-risk scenarios particularly relevant to in-person art-show sales:
- No-name credit cards / contactless tap without ID verification: A buyer taps or uses Apple Pay or another mobile wallet without you verifying identity or cardholder name, which increases your risk if the cardholder later disputes the charge or claims the purchase was unauthorized.
- Card-present fraud: Even when a card is present, fraudsters may use skimmed or cloned cards or tap devices to run unauthorized payments. While card-not-present (online) fraud is more common overall, card-present fraud remains a real risk.
- Chargeback fraud (also called friendly fraud): A buyer makes a legitimate transaction, takes the product, then later disputes the charge (claims theft/unauthorized, or “I didn’t receive it”). The sale is reversed, you lose the item and potentially pay a fee.
- Refund/return abuse / cash-back type manipulation: For example, a buyer purchases, then returns (or claims a refund) or uses payment method in a way that creates a cash-out (or partial cash-out) scenario, leaving you responsible. Retail-fraud resources list “ghost-tap and tap-to-pay” schemes where stolen card data in mobile wallets is used to buy goods and then return them or convert into cash.
- Multiple payments/deposits followed by chargeback: A buyer makes a large payment at your booth, then later claims unauthorized use or returns the art under some pretext. Without strong documentation and process you may be exposed.
- Un-secure payment device/network or manually keyed-in transactions: When you manually key in a card number or use unsecured WiFi or hotspot, you increase risk of interception, fraud, or chargeback because manual entries carry higher risk.
- Poor billing descriptor / unrecognisable merchant name: When the name that appears on the cardholder’s statement is vague or unrecognised, the cardholder may not recognise the transaction and request a chargeback.
Five Practical Protection Strategies for Your Booth
Use chip/tap reader under your control + avoid key-in or swiping when possible
- Encourage the buyer to tap or insert their card or mobile wallet themselves into the reader device (e.g., Square reader) rather than you swipping or keying in the card information.
- If someone insists you key in their information (rather than tap/insert), treat that as a red flag. Manual entries are higher risk.
- Make sure your reader is connected via a secure network (preferably your mobile hotspot) rather than a public/unsecured WiFi.
- This reduces the risk of card-present fraud, skimming or device compromise.
For high-value sales, request ID and document details
- Define a threshold above which you will politely ask to see matching photo ID, and ask the cardholder’s name. For example: “For purchases over $500 we kindly ask to see your photo ID for our records.”
- At minimum, note the name on the card, last four digits of card/transaction, date/time, item sold, price, and communicate estimated delivery or pick-up terms.
- Take a photo of the artwork sold (with buyer optional) and mark “Sold on [date] via [payment method]” on your inventory list.
- Having that documentation helps you dispute a charge-back if needed.
Have clear, visible payment/return policy and issue receipts
- Post a small sign (or include on receipts) your booth’s policy: e.g., “All sales final / exchanges only within 7 days / etc.” so the buyer is aware of terms. This helps avoid “I didn’t know” disputes.
- Issue a receipt (paper or emailed) that includes: date/time, transaction ID (from Square or payment app), item title/description (media, size), price, payment method (last 4 digits), and your business name as appears on statement.
- Ensure your billing/merchant descriptor is clear (so buyers recognise the charge on their statement) so they don’t later report “unauthorised” because they don’t recognise the charge.
- Maintain your own sales log: item, buyer name, payment method, transaction ID. Useful for tracking and proof.
Set internal thresholds & anticipate red flags
- Before the show decide: what your maximum single-transaction value you will process without extra verification; what you’ll do if buyer wants to split payment across multiple cards; how you’ll handle odd behaviour.
- Watch for red flags: buyer in big hurry, wants immediate shipping/pack up, uses multiple cards in succession, insists on manual key-in, attempts to pay with card not in buyer’s name, uses mobile wallet device you can’t verify.
- If something feels off, you may choose to flag the sale, request additional verification (ID), hold the piece until the payment fully clears, or decline the sale.
Secure device, monitor for chargebacks, follow up after show
- At end of day ensure your payment device is turned off/locked, password protected, and you log out of the app. Use updates/security patches.
- Use a personal hotspot or trusted network to minimise man-in-the-middle risk. Avoid public hotel/convention WiFi for processing payments.
- After the show, review your payment-processor dashboard: check for refunds or chargebacks issued. Save your documentation (receipts, photos, logs) for at least 3 months – recommend 6 months.
- If a charge-back occurs, respond quickly with your evidence (transaction log, receipt, photo, ID match) to maximise your chance of winning the dispute.
Additional Insights Worth Knowing
- “Friendly fraud” is a major category of disputes: even legitimate customers sometimes file charge-backs because they don’t recognise the descriptor or forgot the purchase. Education of your buyers helps.
- Even when fraud is not your fault (e.g., stolen card used) you may be liable for the loss if you didn’t follow “reasonable” verification practices.
- Emerging schemes: Retailers are warning of “ghost-tap” or tap-to-pay fraud (using stolen credentials in mobile wallets) and organized groups using returns/cash-back schemes.
- Your merchant account may be monitored by payment providers: if your charge-back rate or refund rate spikes, you could face higher fees or even account termination.