An ordinary online takeout order in Fayetteville turned into a financial nightmare when a local family says nearly $10,000 vanished from their bank account during checkout. They say the payment flow suddenly shifted during the restaurant order, and by the time it was over, the money they were counting on was gone.
Nina Lloyd told 11Alive that the checkout screen was redirected to a third-party verification page. According to Lloyd, a $9,900 wire transfer then cleared from her account without her authorization. She said the money included a gift from an aunt who had recently passed away and that the household had been relying on those funds after her husband lost his job. Lloyd added that she is working with her bank in hopes of getting the money back, but that reimbursement is not guaranteed.
How the sneaky checkout redirect works
Fraudsters often build convincing shell storefronts or inject malicious scripts that quietly send shoppers to fake verification pages. Those pages can scoop up payment details or redirect funds to accounts controlled by criminals, all while looking like a normal part of the checkout flow. Security researchers have documented large networks of look-alike checkout templates that conceal these redirections. As detailed by CloudSEK, these shell checkouts can slip past automatic fraud filters and successfully process payments to attacker-controlled accounts.
What to do if your account is hit
If you see money leaving your account that should not be going anywhere, move fast. Contact your bank immediately, ask them to freeze affected cards or accounts, and hang on to receipts, order confirmations, and screenshots of any checkout or verification pages you saw. You should also file a report with the FBI’s Internet Crime Complaint Center (IC3) and consider submitting a complaint to the CFPB (CFPB), which collect information that can support investigations and, in some cases, help with freezing or recovering funds. The CFPB explains that wire transfers are often more difficult to reverse than debit-card or ACH errors, so time is critical and you should ask your bank what recovery options exist.
Bonchon told 11Alive it is investigating the incident and will cooperate with authorities. The Fayetteville family’s ordeal is a blunt reminder that a routine takeout purchase can spiral into a major financial loss when online checkout flows are compromised.
If you think you have been targeted, contact local police and your financial institution immediately, and file reports with the IC3 and the FTC. Restaurants, for their part, are urged to audit third-party ordering and payment integrations regularly and notify customers if a processing breach appears likely.
