Hackers are exploiting gifting features on AI platforms to monetize stolen account credentials. Claude users report unauthorized gift subscription charges appearing on their statements after account takeovers. This vulnerability turns simple payment storage into a direct cash-out mechanism. Security teams must now audit gifting workflows to prevent these automated financial drains.