topic Re: Loyalty Fraud Alert in Restaurant Operations

Loyalty Fraud Alert

davidcantrell — Tue, 04 Aug 2026 20:21:47 GMT

We have discovered a guest that has used a birthday reward in different months of the year. When reaching out to technical help, they have informed me that guests are able to adjust their birthday in their account.

Our rewards program is very generous, providing a $50 reward for their birth month.

This poses a huge financial liability and Toast is telling us this is a feature request they can put in to the engineers - essentially saying their is nothing they can do about it.

I have asked many times to put a spend limit when redeeming rewards - must spend $100 to use your $50 birthday reward - but it is something they will not change.

We are going to unfortunately have to stop using this feature of the rewards program and look into other reward program options.

Re: Loyalty Fraud Alert

au79teahouse — Tue, 04 Aug 2026 21:31:47 GMT

To my understanding, it is not possible to change the birthday once it is set up. Is it possible the guest in question used different loyalty accounts?

And for the minimum, maybe create your own birthday reward discount instead of using the built-in birthday reward in the loyalty program. It would be a little bit more work for your staff.

Re: Loyalty Fraud Alert

davidcantrell — Tue, 04 Aug 2026 23:32:41 GMT

Confirmed with Toast - they are able to change their birthday in their profiles. And yes, the birthday reward was used by the same phone number

Re: Loyalty Fraud Alert

rcmck — Tue, 04 Aug 2026 23:40:19 GMT

I can't find a way to change my birthday, the only thing I could find was to set a birthday in toast profile in the toast local app but it even asked to confirm the date because it can't be changed later.

Re: Loyalty Fraud Alert

au79teahouse — Wed, 05 Aug 2026 02:46:48 GMT

That's my finding as as well. Interestingly, I asked Toast IQ if a customer can change their birthday on their end. The first response from Toast IQ is "yes, customers can edit their birthday through the digital loyalty card" page. When I asked again, Toast IQ responded with it cannot confirm if it can be done because it's not documented in the database.

However, I do see ways to potentially exploit and abuse the system. Can't confirm without more information.

Re: Loyalty Fraud Alert

davidcantrell — Fri, 07 Aug 2026 04:11:41 GMT

We should be able to limit guests to use only one reward at a time - there are glitches that allow them to use multiple rewards and we have no control over it.

Re: Loyalty Fraud Alert

au79teahouse — Fri, 07 Aug 2026 05:56:32 GMT

I'm pretty sure you can make it only one cash reward per order. However, customers can redeem their birthday rewards and cash reward at the same time when both are available.