Gift cards buy merchant privacy. They do not buy anonymity.

There is a persistent belief that cash in and plastic out means no trail. It was closer to true twenty years ago. Today the honest answer is more precise than yes or no. Prepaid cards are good tools for privacy hygiene: they keep your real card number out of merchant databases, they keep a purchase off your bank statement, and they put a wall between a breach and your accounts. They are weak tools for anonymity. If the goal is to keep your name away from a merchant, they work. If the goal is to make a purchase that no one could ever tie to you, they will not, and nothing else you can buy at a pharmacy will either.

This guide is for the person who wants ordinary discretion: a gift bought without the recipient seeing the statement, a subscription that should not sit next to a real name, a donation, a purchase from a vendor whose security you do not trust. It is also for the person with a reason to keep a particular purchase away from an investigator, a litigant, or an abuser, who needs to know where the real limits are before relying on a tool that does not reach them.

Why a lawful purchase is worth protecting

A purchase can reveal a medical interest, a religious affiliation, a political one, a relationship, a travel pattern, a household. One transaction rarely matters. Joined to the rest, it feeds a profile. Two distinct risks follow from identity-linked purchase records, and they are worth keeping apart.

• Commercial profiling. Retail purchase histories, loyalty records, website and app activity, and location data flow to aggregators that classify and predict. Federal law limits how banks share identifiable account data, and the market does not need it: the profile gets built from everything around the authorization.
• Unauthorized disclosure. Every party that retains purchase data can be breached, and stolen card and purchase records trade in criminal markets. That does not mean every transaction reaches those markets. It means retention and concentration are the exposure.

For a high-risk principal, the concern runs past fraud. An identity-linked purchasing history can reveal activities, relationships, locations, and routines that an adversary would use. Reducing unnecessary linkage shrinks both the profile and what a future compromise can expose.

What this guide is not for

Nothing here is for evading taxes, sanctions, court orders, or anti-money-laundering rules, or for splitting purchases to slip under reporting thresholds. That last one is a federal crime on its own, whether or not the money was clean, and section 08 says so plainly. The posture throughout: private to the merchant and the broker economy, fully answerable to a lawful request.

"Private payment" is four different goals that people run together. They need different tools, and the fourth has a hard limit.

Most people who ask about anonymous payments actually have objectives one through three, which are solvable with ordinary tools. People who have objective four and reach for a gift card get the worst outcome: a trail they believe does not exist.

A fifth concern runs through all four: retention. The question is not only who sees the transaction today but who keeps it, for how long, and what it is joined to later. A tool that hides a purchase from your bank by keeping it somewhere else has moved the record, not removed it.

What matters is the category, not the brand: who has to know who you are to sell it to you, who sees the purchase, and who keeps the record. There is no universal anonymity ranking. There is only the right tool for the record you are keeping your name out of.

A note on cryptocurrency

It belongs on this page only to be set aside. Buying it in the United States means a verified exchange account; spending it means a public ledger that chain-analysis firms read for a living; converting it to a card means the same identity checks as a reloadable prepaid. Cash-accepting crypto kiosks do not change this: operators collect phone numbers or identification, keep records, charge heavy fees, and are a well-documented fraud vector. The privacy-focused coins trade the ledger problem for exchange delistings and banking friction. For the purchases this guide is about, crypto adds a trail rather than removing one.

A conventional ATM turns an account into cash. A reverse ATM, or cash-to-card kiosk, does the opposite: you insert bills, the machine issues a non-reloadable Visa or Mastercard prepaid card for the amount. They have become the standard accommodation at venues that went cashless: stadiums, arenas, amphitheaters, airports, theme parks, campuses.

They are worth a section of their own because they make the central distinction of this guide physical. Many kiosk programs collect no name, no ID, and no bank account at issuance. Lumen Field's published FAQ says cards are anonymous and no personal information is collected, loads $1 to $500, and charges no fee. Dodger Stadium installed the same kind of kiosk when it went cashless. An airport kiosk in Fort Myers charges $6 and loads up to $1,000. At the moment the card comes out of the machine, it is about as unlinked as plastic gets.

Then you use it. Every purchase after that is a normal card-network transaction: merchant, amount, time, card identifier. The kiosk itself logged the issuance: machine, location, time, amount, card number. Checking the balance online logs a device and an IP. And a venue is a place that already knows a great deal: your ticket, the account it was bought in, the entry scan, the cameras over every kiosk. None of that proves a cardholder gets identified. It establishes the routes.

Before using one, check whether registration is required, whether the card works outside the venue and online, what happens to an unused balance, and whether there are dormancy fees. Then use it for what it is: a way to keep your bank out of a cashless building. Not a way to make the building forget you were there.

The non-reloadable Visa or Mastercard gift card remains the most useful tool on this page for objectives two and three, and the most misunderstood. What it does and does not do, in order.

What it does

• Buys with cash at a grocery store, pharmacy, or big-box retailer, without identification, within per-card and per-customer limits.
• Works at most online merchants and nearly every physical one that takes Visa or Mastercard debit.
• Keeps your real card number, and therefore your bank, out of the merchant's systems and out of its breach.
• Keeps the merchant's name off any statement of yours, because there is no statement.

What it costs you

• A purchase fee of several dollars per card, and no refills: when it is spent, it is done.
• Frequent declines: subscriptions and recurring payments, pre-authorization holds at hotels, gas pumps, and rentals, many international merchants, and some platforms that reject prepaid cards outright.
• Weak recourse. Fraud protection and chargeback rights are far below a credit card's.
• Exposure to gift-card draining, where a tampered card on the rack is emptied before you use it. Buy from behind the counter where you can, inspect the packaging, keep the receipt until the balance is spent, and use it soon.

Where the anonymity actually stops

Online use usually requires registering a billing ZIP code on the issuer's site. That step logs your IP address and device. Anything shipped needs an address. Anything digital needs an email. Each of those is a link, and together they are an identity. The card itself is pseudonymous, not anonymous, from the moment you use it online. In person, with no account and no delivery, it is as close as plastic gets, and the camera above the register saw you buy it.

Cash matters because it does not require an identity-linked authorization. Cash-funded instruments vary a great deal in how much of that they keep.

• Direct cash, in person. The fewest records inside the payment system. What remains: the merchant's point-of-sale record, the camera, any membership or loyalty prompt you accept, and the receipt. The only tool that reaches objective four.
• Money orders. Postal money orders are sold for cash up to $1,000 each. They give a payee a verifiable instrument without your bank account number. They still create an issuance record, may carry a remitter name, and identification and recordkeeping rules apply above certain daily totals.
• Retail cash bill payment. Services such as PayNearMe let you pay a bill in cash at a participating store using a barcode the biller issued. Your card and bank stay out of it. The barcode ties the payment to your billing account, so this is payment-method privacy, not anonymity from the biller.
• Stored-value transit and fare cards. A cash-loaded, unregistered card keeps your bank card off every trip. Register it, link it to an app, or use a tap-to-pay bank card instead, and the trip history is yours by name.
• Cash deposits and cashier's checks. Legitimate and useful, and not private: the bank records the deposit under your identity, and a cashier's check keeps the purchaser's details at the bank while hiding them from the payee.

The common thread: cash itself leaves no payment-system record, and nearly everything built on top of cash leaves one. Choose the instrument for the party you need out of the picture.

Not because anyone is watching. Because if a card ever becomes part of a fraud case, a civil dispute, or an investigation, the tracing is procedural, and knowing the procedure tells you what the card can and cannot protect.

What the gift card protects against is the ordinary case: the merchant's marketing database, the merchant's breach, the broker that buys receipt data, the person who reads your bank statement. What it does not protect against is a coordinated investigation with lawful access to the links above. That is the honest framing, and it is the same framing we give for phones and for property: plastic does not erase metadata.

The federal framework is older than most people assume and has not moved much. Retail practice has moved a great deal.

What federal rules actually say

• Open-loop, non-reloadable cards up to $1,000 that cannot be used internationally, moved between people, or reloaded from a non-bank source are exempt from the prepaid-access rules that require customer identification. That exemption is why a Visa gift card can be sold for cash without ID.
• Store (closed-loop) cards up to $2,000 are exempt as well.
• Reloadable cards are prepaid accounts. Activation requires name, Social Security number, address, and date of birth. There is no anonymity layer.
• Sellers who provide prepaid access worth more than $10,000 to one person in a day must identify that person, which is why retailers cap and track volume.
• Consumer protection for prepaid accounts, including fee disclosure and error-resolution rights, comes with registration. Protection and anonymity trade against each other by design.

What retail practice adds

Stores cap the value per card, commonly $500 for variable-load Visa and Mastercard cards, and the number per customer per day. Point-of-sale systems flag repeated purchases across lanes and nearby stores, and some retailers now scan identification at higher volumes regardless of federal thresholds. The window for a cash purchase without ID is real. It is narrow, and it is getting narrower, partly because of fraud and partly because compliance architecture everywhere is converging on identity-bound payments.

Our Privacy Evaluation Framework for Prepaid Card Options (October 2024), and the Prepaid Gift Card Chart built on it (June 2025, updated August 2025), ranked seven branded cards. Checked in October 2026:

• Movo Virtual Prepaid Visa, the chart's recommended reloadable option, was discontinued on March 31, 2023, and the CFPB lists its program agreement as withdrawn.
• American Express Serve, and its sibling Bluebird, stopped selling new cards and closed all accounts on June 3, 2026. Both are gone.
• Vanilla and generic non-reloadable Visa and Mastercard gift cards remain available for cash and remain the right tool for objectives two and three, with the limits in section 05. The "best overall" verdict stands only for those objectives.
• PayPal Prepaid and other reloadables, Netspend among them, are what they always were: verified accounts. The framework rated PayPal Prepaid and Amex Serve "medium" on several of its anonymity measures, which overstated them.
• Crypto.com and BitPay cards are correctly described as low privacy and belong in the crypto note, not in a privacy ranking.
• Privacy.com was listed as an alternative without comment. Our Command Brief CB-202 now sets out what it is: a merchant-facing pseudonymization service run by Lithic, Inc., which keeps verified identity and merchant-level history together for years after closure. Good for objectives one and two, and nothing else.
• Bank virtual numbers and wallet tokens have become the mainstream answer to objective one and deserved more than a footnote.

Branded card rankings date in months. This edition ranks categories instead, which is why the next refresh should be small.

Each sounds reasonable. Each produces false confidence at the moment you rely on it.