That hour on this Sephora gift card
The film was scratched off the day the balance was checked. Sephora’s page showed $40. At the mall register, $0.52 was left. Support looked up the transactions and said the rest had been spent in Tunisia that same day. From the scratch-off to a card that would not pay, about an hour passed.


The person who posted concluded that typing the number and PIN on Sephora’s site is what let the details out. The first agent said Sephora is not responsible for gift card balances. A later manager said the case would go to the technical team, and added a $40 credit to the Beauty Insider account that expired in 30 days. That credit is not a gift card with no expiry.
The official site gets suspected too
The same thread points at another route. A search for a Sephora balance check can put a lookalike page first. That page takes the number and PIN, then shows a balance that looks normal. The holder believes the page is the official one.
The Sephora gift card FAQ says not to check a balance on any third-party site, and that such sites are likely scams. Target’s gift card scam prevention page says not to buy, sell or check a balance outside Target.com, and to check only on Target’s own site. Those are the brands’ own sentences. The GiftVeri website does not take card numbers. The Windows client sends a read-only query to that brand’s official API. That is not a claim of being safer than the official site, and it does not stop a number that was already copied.
The order of events comes before “I just typed it”
The money was spent in Tunisia before this holder reached a register. Spending after activation and before the holder uses the card shows up on other brands too: the first scratch-off is already empty, and the money is in someone else’s account. An entry and a purchase on the same day do not show which event let the number out. The number can leave the card when the package is swapped, when the sleeve is switched, or on an earlier check.
What GiftVeri reads is the balance the official API returned on that run. $40 means $40 at that moment. The $0.52 an hour later is a separate purchase. The pre-activation check only reads whether the card status in the pre-query is empty or not. It does not find who spent the money.
The page you opened and the address printed on the card
Someone opened a balance page and it showed 0. The spend was in California and Oregon. Separate two questions: whether that address is the one printed on the card, and whether the money was spent before you held the card. Most replies were the second. Support then asked for ID before a dispute. This page does not list which ID to send, and it does not recommend any balance domain.
A copied table of balance addresses
In 2018 someone copied many balance addresses into one table. The table goes stale, and lookalike domains sit beside it. Target says to check only on Target.com, and Sephora says not to check a balance on a third-party site. The table is not reprinted here.
Did typing the number cause the spend, or was the number copied earlier?
That hour does not prove this entry sent the money out. The person who posted believed they were on Sephora’s own site; the same thread also says a lookalike balance page in search results can take the number first. Sephora says not to check a balance on a third-party site, and Target says to check only on Target’s own site. The spend happened before the holder used the card. An empty balance status does not show whether the number was copied.
How this card was argued with the store and with support is on the US Sephora page. How an empty status is read is on the pre-activation check.