3.1.6.2 - "Store Credit Only" Traps: Refusing cash refunds in violation of local consumer laws (Difficulty: Advanced | Ethics: Black Hat | Path: Scale)

SECURITY BRIEFING: HIGH-RISK STRATEGY ANALYSIS. The lesson you are about to study details a "Black Hat" operational tactic known as the "Store Credit Only" Trap. This involves a merchant rigidly refusing monetary refunds to the original payment method, instead forcing customers to accept digital store credit or gift cards. While this tactic creates an artificial "cash lock" that prevents revenue from leaving the business in the short term, it relies on exploiting consumer ignorance and burying restrictive terms in fine print.

We are analyzing this strategy not as a recommendation for implementation, but as a forensic risk assessment. In the aggressive scaling phase of e-commerce, operators often view returns as "lost revenue" rather than a cost of doing business. The "Store Credit Only" trap attempts to convert a refund request into a guaranteed future sale. However, this approach violates fundamental consumer protection frameworks in major markets like the UK, the European Union, and specific US states (such as California under CCPA).

The mechanism works by creating friction. When a customer requests a return, the support system—either automated or human—denies the cash refund option, citing policy. The customer is presented with a "take it or leave it" offer: keep the unwanted item or accept store credit. This creates a hostile environment where the merchant effectively holds the customer's liquidity hostage. This briefing will dissect the anatomy of this exploit, illustrating exactly how bad actors implement it technically and operationally.