Gift card inquiries jump 340% between November and January, flooding support queues when teams are already stretched. Most requests are legitimate balance checks, but 12% involve lost codes, deleted emails, or suspicious ownership claims. Handle these wrong and you either frustrate real customers or hand free money to fraudsters.
Key takeaways
- Verify gift card ownership using order lookup, partial code matching, and email confirmation — never the full 16-digit code alone
- Re-issue lost codes only after security checks: order history review, purchase email verification, and fraud pattern screening
- Automate simple balance inquiries with AI triage rules while escalating high-value cards, multiple attempts, and mismatched customer details
- Manual verification takes 8–12 minutes per ticket; AI-assisted workflows cut this to under 90 seconds
- Set explicit re-issue policies in your help center to reduce repeat inquiries by 60%
How do you verify gift card ownership without exposing codes to fraudsters?
Verify ownership through three-layer authentication: order lookup, partial code matching, and email confirmation. Never ask customers to provide the full 16-digit code in an email or chat — it's too easy to intercept. Instead, ask for the last four digits, the purchase date, and the recipient email address. Cross-reference these against the order record in Shopify.
Start with order lookup. If the customer purchased the gift card themselves, their email appears in the order as both buyer and gift card recipient. Pull the order number from your Shopify admin using the customer's email and the approximate purchase date. Check the order's line items for a gift card SKU and confirm the amount matches what the customer claims.
For gift cards sent to someone else, the recipient email won't match the purchaser's order. Ask the customer for the sender's name or email. Search Shopify orders by the sender's details, locate the gift card line item, and verify the recipient email matches the person contacting you. If it does, you've confirmed ownership without exposing the full code.
Use partial code matching as a second factor. Ask the customer for the last four digits of the gift card code. Compare this to the code stored in Shopify's gift card records. If the digits match and the email aligns, you can safely share the balance or re-issue the code. This method blocks most fraudsters — they rarely have both the partial code and the correct recipient email.
Email verification adds a final checkpoint. Before disclosing any balance or re-issuing a code, send a one-time verification link to the email address on file. The customer must click the link to prove they control the inbox. This stops attackers who've guessed a partial code but don't have access to the recipient's email. Heylio's Shopify order lookup tool automates the first layer — it pulls order details, gift card line items, and recipient emails in under 3 seconds, so your team spends less time hunting through the admin.
How do you handle lost or deleted gift card emails?
Re-send lost codes only after confirming purchase history and verifying the recipient email. Customers delete gift card emails accidentally, or they land in spam folders and expire. When someone claims they never received the code, your first job is to confirm the gift card exists and belongs to them.
Check the order record in Shopify. Pull up the customer's email and search for orders containing gift card products. If you find a match, verify the recipient email on the gift card line item. If the recipient email matches the person contacting you, the card was issued. Next, check whether Shopify sent the email. Shopify logs gift card email delivery in the order timeline — look for a "Gift card sent" event with a timestamp. If the event exists, the email was delivered to the address on file.
If delivery is confirmed but the customer claims they didn't receive it, ask them to check spam, promotions tabs, and any email filters. Provide the exact sender address Shopify uses for gift card emails — usually a no-reply address tied to your store domain. If they still can't locate it, verify their email address is correct. Typos in recipient emails are common — a single misplaced letter sends the code to someone else's inbox.
For legitimate lost-code cases, re-issue the code manually through Shopify admin. Navigate to the gift card record, copy the full code, and send it via a secure channel — preferably your helpdesk software, not plain-text email. Include the card balance, expiration date (if any), and a link to your gift card balance checker. Log the re-issue in the order notes so future agents know the code was shared twice.
Set a clear re-issue policy in your help center. State that codes are re-sent once per customer after identity verification. This cuts repeat requests by 60% — customers stop treating your support team as a gift card code storage service. If a customer requests a third re-send, escalate to a manager and flag the account for fraud review. Heylio's Shopify gift card issuance action can regenerate codes automatically for verified customers, reducing manual re-issue time from 8 minutes to under 60 seconds.
Can AI triage rules auto-verify balance checks while escalating suspicious requests?
Yes — AI triage rules handle simple balance inquiries automatically and escalate high-risk patterns. Set up rules that route straightforward "What's my balance?" questions to an automated flow while flagging multiple attempts, mismatched emails, and high-value cards for human review.
Build a balance-check automation using three inputs: the customer's email, the last four digits of the gift card code, and a balance lookup API call. When a customer emails "What's my gift card balance?", the AI extracts the partial code from the message, queries Shopify's gift card records, and replies with the current balance — no human involved. This works for 70% of inquiries, the ones where the customer provides enough detail upfront.
Escalate requests that lack verification details. If the customer doesn't include the last four digits or their email doesn't match the recipient address on file, the AI flags the ticket for manual review. Same for customers who submit multiple balance inquiries within 24 hours — it's a fraud pattern. High-value cards (over $200) always escalate, even if the email and partial code match. The risk of a costly mistake outweighs the time saved.
Use sentiment analysis to catch frustrated customers. If the message contains phrases like "still waiting", "third time asking", or "this is ridiculous", route it to a human immediately. Automation is fast, but it can't de-escalate an angry customer who's been bounced through three bot replies.
Log every automated balance check. Store the timestamp, customer email, partial code, and balance returned. If the same card is queried from different email addresses within a week, flag both accounts for fraud review. This audit trail also protects you if a customer later claims they were given the wrong balance.
Heylio's AI triage rules integrate with Shopify's gift card API to pull balances in real time. The AI drafts replies using your playbook — you control the tone, the verification steps, and the escalation thresholds. When a ticket escalates, the AI hands over a summary: customer email, partial code provided, mismatch details, and prior inquiry history. Your agent picks up mid-conversation with full context, so the customer doesn't repeat themselves.
Manual vs AI-assisted gift card verification workflows
Manual verification takes 8–12 minutes per ticket; AI-assisted workflows drop this to under 90 seconds. The time savings compound during holiday spikes when gift card inquiries triple.
| Step | Manual workflow | AI-assisted workflow |
|---|---|---|
| Order lookup | Agent searches Shopify admin by email, scrolls through orders, identifies gift card line item (2–4 min) | AI pulls order details via API in 3 seconds, surfaces gift card line items automatically |
| Code verification | Agent asks for last 4 digits, manually compares against Shopify gift card record (1–2 min) | AI extracts partial code from message, matches against API response instantly |
| Email confirmation | Agent checks recipient email on gift card line item, compares to sender email (1 min) | AI cross-references recipient email and flags mismatches in real time |
| Balance disclosure | Agent copies balance from Shopify, pastes into reply, adds context (2–3 min) | AI auto-generates reply with balance, redemption link, and expiration date (10 sec) |
| Escalation decision | Agent reviews ticket history, guesses fraud risk, decides whether to escalate (2 min) | AI flags multiple attempts, high-value cards, and email mismatches based on pre-set rules (instant) |
| Total time | 8–12 minutes | 60–90 seconds |
| Fraud risk | Depends on agent training and attention to detail | Consistent — rules apply to every ticket, no fatigue factor |
| Customer friction | High — customer waits for agent availability, provides info across multiple replies | Low — balance returned in first reply for verified requests, clear escalation message for flagged cases |
The manual workflow scales poorly. If you receive 200 gift card inquiries during a holiday weekend, that's 26 hours of agent time. An AI-assisted workflow handles 140 of those automatically, leaving 60 for human review — roughly 6 hours of work. The cost difference is stark: at €15/month for 60 AI resolutions on Heylio's Starter plan, you're paying €0.25 per automated ticket. An agent handling the same ticket at $20/hour costs $2.67.
AI workflows also reduce customer friction. When a customer emails a balance inquiry at 11 PM, the AI replies in under 60 seconds instead of waiting for the next agent shift. For escalated cases, the AI explains why — "We need to verify your identity before sharing this balance" — so customers understand the delay.
What policies prevent repeat gift card inquiries?
Publish explicit gift card policies in your help center and link to them in every gift card email. Customers re-contact support because they don't know where to check balances, how to redeem codes, or what to do if an email is lost. Clear documentation cuts repeat inquiries by 60%.
Create a dedicated gift card FAQ page covering six questions: How do I check my balance? Where do I enter the code at checkout? What if I lost the email? Do gift cards expire? Can I use a gift card on sale items? What if my balance doesn't cover the full order? Each answer should be 40–80 words and include a direct link to your gift card balance checker or redemption instructions.
Add a "Check your balance" link to every gift card email. Place it prominently below the code, styled as a button. The link should lead to a self-service balance checker — a page where customers enter their code and see the current balance without contacting support. Shopify's default gift card email template supports this; customize the text to match your brand voice.
State your re-issue policy upfront. Include one sentence in the gift card email: "Save this email — we can re-send your code once after identity verification." This primes customers to store the email and sets expectations if they lose it. In your help center, expand the policy: "Lost your gift card code? Contact support with your order number and the last four digits of the code. We'll verify your identity and re-send the code. For security, we limit re-issues to one per customer."
Set expiration reminders for time-limited gift cards. If your gift cards expire after 12 months, send an automated email 30 days before expiration with the remaining balance and a redemption link. This prevents "Why did my gift card stop working?" inquiries after the card expires.
Log policy links in every AI reply. When Heylio's AI answers a gift card inquiry, it appends a line: "Find answers to common gift card questions here: [link]". Customers who need more help after the AI's reply can self-serve instead of re-opening the ticket.
What's the fastest way to scale gift card support during holiday spikes?
Deploy AI-powered balance checks before Black Friday and train your team on fraud patterns. Gift card inquiry volume triples between November and January — most stores see 600–900 gift card tickets in a four-week span. Manual workflows collapse under this load; AI workflows handle the surge without hiring seasonal agents.
Set up automated balance inquiries two weeks before your first promotion. Test the AI flow with sample tickets: customers who provide full details, customers who forget the partial code, customers whose emails don't match the recipient address. Confirm the AI responds correctly in each scenario and escalates edge cases. Run 20–30 test tickets to catch bugs before real customers hit the queue.
Create a gift card fraud playbook for your team. List red flags: multiple balance checks from different emails within 48 hours, high-value cards (over $200) with urgent re-issue requests, customers who can't provide order numbers or purchase dates. Include escalation steps — when to ask for photo ID, when to freeze a card, when to involve your payment processor. Share the playbook in a team meeting and pin it in your helpdesk knowledge base.
Schedule daily queue reviews during peak weeks. Even with AI handling 70% of inquiries, the escalated 30% still represents 180–270 tickets. Assign one agent to review flagged tickets each morning, prioritize by risk level, and resolve high-confidence cases quickly. Block 90 minutes for this review — it prevents overnight backlogs from snowballing.
Monitor AI resolution rates and adjust triage rules mid-season. If the AI is escalating too many legitimate tickets, loosen the verification threshold slightly. If fraud attempts increase, tighten the rules. Heylio's dashboard shows resolution rates by ticket type — you'll see if balance inquiries are auto-resolving at 68% or 72%, and you can tweak accordingly.
Budget for burst capacity. Heylio's Growth plan (€49/month, 250 AI resolutions) covers most stores through a normal month, but holiday spikes push you over. Add a credit pack (100 resolutions for €15) in November to avoid manual overflow. The math works: 100 extra AI resolutions cost €15; 100 manual tickets at 10 minutes each cost 16 agent hours, roughly €320 at $20/hour.
Setting up gift card workflows: What actually works
Start with a self-service balance checker and layer AI triage on top. The balance checker eliminates 40% of inquiries before they reach your inbox. The AI handles another 30%, leaving 30% for human review — a manageable load even during holidays.
Embed the balance checker on your gift card landing page. Use Shopify's Storefront API to pull balances by code. The customer enters their 16-digit code, clicks "Check balance", and sees the current balance plus a "Redeem now" button that pre-fills the code at checkout. This takes 15 seconds and requires zero support involvement.
Connect your AI to Shopify's gift card API for automated replies. When a customer emails "What's my balance?", the AI extracts the partial code, queries the API, and drafts a reply in 10 seconds. Include the balance, a redemption link, and a line about expiration (if applicable). For customers who don't provide a code, the AI replies with a link to the self-service checker and instructions to email back with the last four digits if they need help.
Train your team on the escalation criteria. If the AI flags a ticket, the agent reviews the order history, confirms the email matches, and decides whether to share the balance or ask for additional verification. High-value cards always require photo ID or a video call — this sounds excessive, but it stops 95% of fraud attempts. Fraudsters don't have the recipient's ID; real customers do.
Review your workflow monthly outside of peak season. Check how many balance inquiries escalated unnecessarily, how many fraud attempts slipped through, and whether the self-service checker is working. Adjust your AI triage rules based on real patterns. If you see repeat inquiries from the same customers, update your help center article to address their confusion.
Heylio's Shopify integration includes order lookup, gift card issuance, and balance queries. The AI uses your playbook to decide when to auto-reply, when to escalate, and what verification steps to include. You write the rules once, and the AI applies them consistently to every ticket — no agent fatigue, no judgment calls at 4 PM on a Friday.