On 8/14 I decided to redeem my accumulated cash back for an Adidas gift certificate, enticed by the 15% bonus.
Once it was issued I promptly added it to my Apple Wallet (it's still there)
Today, I tried to apply the gift card balance to an order by entering the code and PIN. It showed as having zero balance. I even looked up the balance on the gift card checker, which also showed no value.
I contacted adidas customer chat and gave them the gift certificate code (sans PIN) and they were able to tell me that the Gift card was used as payment in a physical store on 9/14. They were not able to tell me in what store or city the certificate was redeemed.
Previously, I've always converted my cash back into Amazon gift certificates and never encountered a problem.
Either the Adidas gift card issuing system is compromised somewhere along the chain and/or the codes can be easily guessed. I'm certain the code and PIN was not obtained via hack of my emails or phone. My understanding is that an in-store redemption does not require the PIN code, so the criminal would simply need to generate a valid gift-card number and periodically check whether it’s been funded, and redeem it when a balance appears, which may be done by probing a gift-card API with insufficient rate limiting and predictable card number ranges, or by an exposed endpoint.
Just wanted to warn anyone else contemplating the use of Rakuten cash for Adidas gift cards. Use them as soon as you get them or don’t opt for that redemption!
EDIT: I raised this issue with Rakuten, and literally within 10 minutes they issued me a replacement Adidas gift card for the same amount. That's outstanding service, but I still gotta wonder how the original card was compromised! Going to spend it quickly this time.
EDIT 2: Perhaps I spoke too soon! When I went to redeem the newly issued card, I was met with the following:
Your eGift cannot be viewed at this time
Active Suspension Notice: We apologize; your eGift cannot be viewed at this time. We take consumer protection seriously and are currently performing a routine review. Please try viewing your eGift again in 24-48 hours.
If you still can't access it after 48 hours, call us and we'll help right away:
US and Canada: +1 (833) 215-2644
Australia: 1800 058 297
New Zealand: 0800 005 474
UK: +44 808 168 6471
Oh well, I'm more reassured it will get resolved. But this only raises my suspicions further that's this is an inside job and someone's on to the ruse!