Holiday refund fraud is becoming a major threat for restaurants, especially during the busy season. More guests, more checks, and more card transactions flowing through your POS.
But with that surge in volume comes a less festive trend: more fraud. Recently, restaurants have seen a rise in a specific scam where guests appear to "pay their bill" then quietly run a manual refund on your payment device while it's left at the table.
Some of these tactics are even being promoted on social media as a "hack."
The good news: with the right settings and employee permissions, you can block this scam before it happens.
Why Holiday Season = Higher Fraud Risk for Restaurants
Increased transactions + customer volume
Holidays mean crowded stores and quicker check-outs. With staff juggling multiple customers, mistakes or oversight become more likely.
More opportunities for scams
The rush makes it easier for fraudsters to slip through — including a growing scam seen with tableside point of sale and ordering devices: the "manual refund" trick.
Scams can happen in seconds
Many businesses don't discover fraudulent refunds until after the fact, when reviewing transaction logs — by then the money's gone.
The "Manual Refund Hack" That Targets Clover Devices
How the Scam Works
Here's what many restaurants are reporting:
- A guest asks to pay at the table.
- A server brings the payment device and hands it to the guest.
- The server walks away — maybe to grab a receipt, run food, or greet another table.
- While the device is unattended, the guest exits the payment screen.
- They open the manual refund menu and process a large refund back to their card or account.
- On the surface, it looks like a normal transaction — until you review your reports and catch an unexpected refund.
This can happen in seconds, and because it appears as a refund, many restaurants don't notice right away.
Why It's Spreading
This behavior isn't just random anymore. In some cases, it's being shared online as a "hack" to get money back from restaurants. That makes it even more important for merchants to lock down their POS settings before it becomes a bigger issue in their area.
Use Clover's Built-In Security to Shut Down Refund Fraud
Clover devices are designed with strong security under the hood — encrypted data, tamper-sensitive hardware, and detailed user access controls. The key is making sure those protections are enabled and configured correctly.
Two settings make a huge difference for restaurants:
1. Lock the Device After Payment (Secure Payment Flow)
One of the most effective protections is ensuring your Clover device locks into the payment flow when a guest is paying.
When features like Secure Payment Flow or similar "locked" payment modes are enabled:
- Guests can complete payment, tip, and confirm the amount
- But they cannot back out into menus like refunds, manual entry, or merchant settings
- Even if the device is left on the table for a moment, the guest is stuck on the payment screen only
This directly prevents the "I paid… now I'll sneak to the refund screen" trick.
Action Step: Before the holiday rush, confirm that your payment flow is set to lock after payment and that customers cannot access the home screen or refund menus.
2. Tighten Refund Permissions for Employees
The second major layer of defense is who can issue refunds at all.
Clover lets you control refunds by role and by individual:
- Remove refund access for roles that don't need it (e.g., hosts, bussers, seasonal staff).
- Set refund limits, so any refund over a certain amount requires a manager PIN or approval.
- Use employee-level permissions so only trusted team members — like managers or supervisors — can process or approve refunds.
Even if someone somehow makes it to the refund screen, these restrictions keep them from getting very far.
Action Step: Audit your employee roles and permissions now. If someone doesn't absolutely need refund access to do their job, remove it.
Daily Best Practices to Keep Your Restaurant Protected
Technology handles a lot of the heavy lifting, but consistent habits inside the restaurant matter just as much.
Here are daily practices to reinforce with your team:
Don't Leave Devices Unattended
Treat your Clover devices like cash.
- Never leave them on a table after a guest "pays."
- Retrieve devices immediately after each transaction.
Rotate and Protect Admin Passcodes
- Use strong, unique passcodes for admin and manager roles.
- Change them regularly, especially before and after the holiday season.
Limit Access to Only Those Who Need It
- Only give manager-level access to trusted leaders.
- Avoid sharing logins or generic "manager" codes across the entire staff.
Review Transactions Regularly
- Make it a habit to check your daily transaction and refund reports.
- Look for unusual patterns: large refunds, multiple refunds to the same card, or refunds outside normal business hours.
Turn On Two-Factor Authentication (2FA)
- Enable 2FA on your Clover dashboard for an extra layer of security on your account.
- This helps protect against stolen logins and remote access fraud.
SmarterSwipe + Payment Solutions: Smarter Security for Busy Seasons
At SmarterSwipe, we work with restaurants every day that are seeing this exact type of fraud — especially during the busy holiday periods.
By helping merchants:
- Configure payment permissions correctly
- Lock devices down after payment
- Understand how refund fraud shows up in their reports
…we make it easier for owners and managers to stay focused on guests and revenue, not chasing down avoidable losses.
If you're unsure whether your settings are secure, or you want a quick review before the holidays, our team can help you optimize your Clover setup for security and speed.
Conclusion: Let the Holidays Be Busy for the Right Reasons
Holiday scams move fast — but your defenses can move faster.
By locking your Clover devices after payment, tightening refund permissions, and building strong security habits with your staff, you can effectively shut down the "manual refund hack" and other refund scams targeting restaurants.
Use the tools you already have, take a few minutes to update your settings, and let this holiday season be busy for all the right reasons: happy guests, full tables, and secure payments.
