BRAND IMPERSONATION

Costco rewards survey scam: the fake gift card email that hides a monthly charge

Q: What is the hidden subscription in the Costco survey scam?

After the survey asks for a small shipping fee of a couple of dollars, the fine print you scrolled past authorizes a recurring monthly charge, commonly $10 to $40, for a wellness club, savings program, or rewards membership with no connection to Costco. The tiny fee is bait to capture your card, and the real cost is the monthly billing that follows. Watch your statement and dispute any charge you did not knowingly agree to.

An email or text says "Costco" and offers you a $500 gift card, a Ninja CREAMi, or a Yeti cooler for finishing a quick reward survey. The survey then asks for your card "to ship the prize," and buried fine print quietly enrolls you in a monthly subscription. Here is how to know it is fake in seconds, without tapping the link or typing a single detail.

SafeBrowz Threat Research Security ResearchJuly 3, 20269 min read

Verdict: it is a scam - Costco does not run reward surveys from random email addresses

An email or text that shows "Costco" as the sender name and offers a $500 gift card, a Ninja CREAMi, a Yeti cooler, or a Samsung TV for a short survey is a phishing scam, not a real Costco reward. The display name says Costco, but the actual sender is a random Gmail or an unrelated domain, and the survey page collects your personal and payment details "to ship the prize" while fine print signs you up for a recurring monthly charge, often $10 to $40. Costco does not notify winners this way, and a genuine reward never needs your card number to ship. Do not tap the link. If you want to check a real Costco account or offer, type costco.com yourself or open the official Costco app.

The Brief

A wave of Costco impersonation is running over email and text in 2026, and it is more polished than the usual junk. The message looks like it came from "Costco," "Costco Rewards," or "Costco Member Services." It congratulates you, offers a valuable prize for a two-minute survey, and drops a link to a page dressed in Costco's red and white. The page asks a few easy questions, then requests your name, address, and card number so it can "ship your free reward." The catch sits in the small print: by submitting, you authorize a recurring monthly charge for some "wellness club" or "savings program" you never wanted. Costco itself keeps an official "Currently Known Scams" page warning about exactly this pattern. The rule that beats it is the same one that beats a fake Temu reward text: judge the offer on the real site you open yourself, never on the message that reached out to you.

What the fake Costco survey looks like

The subject line does the first bit of work. "Congratulations, you have been selected for a Costco member reward." "Your Costco Rewards survey is ready, claim your $500 gift card." "Exclusive: complete this short survey for a Ninja CREAMi." Some versions promise a Yeti cooler or a Samsung TV. A few dress up as a billing notice instead, warning of a "membership renewal issue" so you click to "fix" it. All of them route to the same kind of place.

Open the link and you reach a survey page in Costco colors. It asks a handful of throwaway questions ("How often do you shop at Costco?") to make the reward feel earned. Then comes the real ask: your full name, address, phone, and a card number to "cover a small shipping fee," often set low enough to feel harmless, around $1.95, $4.95, or $9.99. That tiny fee is bait. Once your card is entered, the fine print you scrolled past authorizes a recurring monthly charge, commonly $10 to $40, for a "wellness club," "savings membership," or "rewards program" with no connection to Costco. Some victims also have the card details sold or reused for outright fraud.

The tell is the sender. The display name reads "Costco," but the actual address is a random Gmail or an unrelated domain that has nothing to do with the retailer. Legitimate Costco email comes from its own verified domain, ending in @costco.com. The links in these messages never lead to costco.com either. They lead to lookalikes such as costco-rewards[.]top, costco-survey-claim[.]shop, or costcomember-verify[.]online (illustrative examples, not real Costco domains). The word "costco" is glued to "rewards," "survey," or "verify," or parked on a cheap ending like .top or .shop that a real retailer would never use for its store.

The real Costco store and account live on costco.com. Anything else wearing the logo is impersonation, no matter how convincing the survey looks. Verify by signing in at costco.com directly, never through a link in the message.

🛡 LIVE CHECK

Test that "reward survey" link before you tap

Got an email or text with a Costco survey or gift-card link and not sure about it? Paste the link below before you tap it. Our 3-layer engine (Local + APIs + AI) returns a verdict in about 3 seconds. Free, no signup.

Full scan with deep AI analysis → · No URL is logged to your identity.

The 30-second check: verify only on costco.com, never in the email

This is the whole answer, and it works whether the message is a perfect fake or the rare genuine notice, because it never trusts the email or the text.

Do not tap the link. Do not open the survey, do not enter anything. Nothing real is lost by pausing.
Check the real sender address, not the name. Tap or hover the "from" field. If it is anything other than a costco.com address, the message is fake. A display name reading "Costco" over a Gmail or random domain is the giveaway.
Open costco.com yourself. Type it in the address bar or use a bookmark. Do not search and click an ad, and do not use any link from the message. Real member offers appear in your account there, not only in an email.
Never enter a card number to "ship" a free prize. A genuine reward does not need your card to cover shipping. That field exists to charge you.
If the offer is not in your Costco account, it was fake. Delete the email or text. There is no $500 gift card and no survey.

That is the same rule that beats the whole category, from a fake Amazon account-verification email to a Chase bank phishing email: judge it on the real, official site you open yourself, never on the message that reached out to you.

Red flags that mark it as a scam

The sender name says "Costco" but the real address is not @costco.com. A random Gmail or unrelated domain behind the display name is the single clearest tell.
A prize for a survey you never entered. Costco does not pick reward winners by unsolicited email or text. No entry, no prize.
A card number requested to "ship" a free reward. A real giveaway never needs your card to cover shipping or a small fee. That field is there to steal the card and start a charge.
Fine print authorizing a recurring monthly charge. Look for tiny text about a "wellness club," "savings program," or "membership" that bills every month. That is the hidden subscription.
A link that is not costco.com. Anything like costco-rewards, costco-survey-claim, or a store parked on .top, .shop, .online, or .vip is fake, even if the page looks perfect.
Pressure and a countdown. "Claim before midnight," "only a few rewards left." Urgency is there to stop you checking on the real site.
A "membership renewal issue" you did not know about. The billing-alert version pushes the same link. Check your renewal only by signing in at costco.com.

What to do if you already entered your details

Move fast. Speed is what limits the damage, especially with the hidden subscription.

Call your bank or card issuer now. Use the number on the back of your card. Report the card as compromised, request a replacement, and ask them to block any recurring charge from the "survey" merchant.
Watch your statement for a small recurring charge. The hidden subscription often starts at $10 to $40 a month under a vague name. Dispute it and cancel it the moment it appears.
If you entered a Costco password, change it. Reset it by going to costco.com directly, and turn on two-step verification if it is offered.
Turn on two-step verification on your email too. A stolen password alone should not be enough to get in.
Reset that password anywhere you reused it. Give every account its own unique password.
If you entered a lot of personal data, watch for identity theft. Consider a fraud alert or credit freeze and monitor for new accounts opened in your name.

How to report the Costco survey scam

Report it to Costco. Costco maintains a "Currently Known Scams" page and takes reports of messages that impersonate the brand, at customerservice.costco.com.
Forward scam texts to 7726 (SPAM). This free shortcode reports the message to your mobile carrier so it can block the sender.
Report the scam to the FTC at reportfraud.ftc.gov. The FTC's guidance is blunt: you never have to pay a fee to collect a real prize.
In the US, report to the FBI Internet Crime Complaint Center at ic3.gov if you lost money or had an account taken over.
Delete the message after reporting. Do not tap anything on the way out.

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

Layer 1 - Local detection: 60+ URL pattern signatures plus a 550+ brand database (Costco included) plus Cyrillic and Punycode homograph checks, all running inside the extension before the page renders. It catches lookalike reward and survey domains such as costco-rewards or costco-survey-claim, where a non-Costco domain serves a Costco-styled page. Reading a page's brand name against the domain it actually sits on is exactly how it separates a real costco.com from an impostor.
Layer 2 - API checks: aggregates Google Safe Browsing, PhishTank, URLhaus and ScamAdviser feeds plus 30+ scam TLD lists to flag domains already known to be malicious, which covers many gift-card and "claim your reward" survey pages as they get reported.
Layer 3 - AI deep scan (Premium): 100+ language content analysis catches brand-new lookalike pages in seconds, including a fake Costco survey that copies the real styling but sits on the wrong domain and pairs a "free" prize with a card field and recurring-charge fine print.

Honest scope: SafeBrowz flags the phishing survey page and blocks it before it loads, so the "enter your card to ship the prize" step cannot reach you. It reads the page, not your inbox, so it cannot delete the email itself. Pair the extension with one habit: never enter a card number to claim a free reward, and check any Costco offer only by signing in at costco.com.

Detection signatures come from threat-intelligence research and our internal brand database, not from user browsing data. SafeBrowz does not store per-user browsing history.

Where browser-layer defense fits

The email is the lure, but the damage happens on the page. That survey link is where victims are pushed to type a card number and scroll past the fine print that starts a monthly charge. Browser-layer scanning catches that step. When a Costco-styled survey or reward page renders on a domain that is not costco.com, a brand-aware scanner flags the impersonation before the form loads. SafeBrowz is a free extension for Chrome, Firefox and Edge, plus a live Android app (Safari coming soon), that checks every URL before it renders against a 550+ brand database. Install SafeBrowz and pair it with the one rule that beats this whole category: reach Costco only by typing costco.com yourself, and never enter your card to claim a free prize. If you are still unsure, our guide on how to spot fake online store scams walks through the deeper checks, and our breakdown of AI-generated phishing emails covers why these fakes look so convincing now. For the classic office-impersonation version, see how to spot a Microsoft phishing email.

Install SafeBrowz free

Add the browser extension, or the SafeBrowz Android app, that runs every link check in this article automatically, on every page, before it renders. Free forever, with optional Premium AI deep scan at $14.99 per year.

Add to Chrome Add to Firefox Add to Edge Get it on Google Play

See pricing and Premium features

Frequently asked questions

Is the Costco reward survey email real?

No. Costco does not send unsolicited reward surveys offering a $500 gift card, a Ninja CREAMi, a Yeti cooler, or a Samsung TV. A message that shows "Costco" as the sender name but comes from a random Gmail or an unrelated domain is a phishing scam. It routes to a survey page that harvests your personal and card details and signs you up for a hidden monthly charge. Check any real Costco offer only by signing in at costco.com yourself.

How can I tell the email is a fake Costco message?

Check the real sender address, not the display name. Tap or hover the "from" field. Legitimate Costco email comes from an address ending in @costco.com. If it is a Gmail or an unrelated domain, it is fake. Other tells: a prize for a survey you never entered, a request for your card to "ship" a free reward, tiny fine print about a recurring monthly charge, a link that is not costco.com, and a countdown pressuring you to claim before midnight.

What is the hidden subscription in the Costco survey scam?

After the survey asks for a small "shipping fee" of a couple of dollars, the fine print you scrolled past authorizes a recurring monthly charge, commonly $10 to $40, for a "wellness club," "savings program," or "rewards membership" with no connection to Costco. The tiny fee is bait to capture your card, and the real cost is the monthly billing that follows. Watch your statement and dispute any charge you did not knowingly agree to.

I entered my card on the Costco survey page. What now?

Call your bank or card issuer immediately using the number on the back of your card. Report the card as compromised, request a replacement, and ask them to block any recurring charge from the survey merchant. Watch your statement for a small monthly charge and dispute it the moment it appears. If you entered a Costco or email password, change it by going to the site directly and turn on two-step verification.

Does Costco run surveys or giveaways at all?

Any genuine Costco promotion appears in your account when you sign in at costco.com, or through the official Costco app, and it never asks for your card number to ship a free reward. Costco maintains a "Currently Known Scams" page precisely because impersonators abuse its name for fake surveys and gift-card offers. Treat any survey or giveaway that arrives by unsolicited email or text as a scam until you have confirmed it on costco.com yourself.

How do I report a Costco impersonation scam?

Report messages that impersonate Costco through Costco Customer Service at customerservice.costco.com, which maintains its "Currently Known Scams" page. Forward scam texts to 7726 (SPAM) so your carrier can block the sender. Report the scam to the FTC at reportfraud.ftc.gov, and in the US file a report with the FBI at ic3.gov if you lost money or had an account taken over. Then delete the message without tapping anything.

Related SafeBrowz coverage

Bottom line: the "Costco reward survey" email offering a $500 gift card is a phishing scam that steals your card and hides a monthly charge in the fine print. Costco does not run reward surveys from random email addresses, and no real prize needs your card number to ship. Check the real sender, do not tap the link, and verify any offer only by signing in at costco.com yourself. Put SafeBrowz on your browser so the fake survey page never loads, and pair it with the habit of never entering your card to claim a free reward.