User:Louis/Counterfeit SD cards

A counterfeit SD card destroys the data written to it, and the loss cannot be recovered. The card's controller is reprogrammed to report far more storage than the flash chips physically hold, so a card sold as 256 GB may contain only 16 GB of genuine memory, and one labeled 64 GB only 8 GB. The device it is plugged into trusts the false number and reports a successful write, but everything stored past the card's true capacity is silently corrupted or discarded. The cards sell cheaply through online marketplaces such as Amazon & eBay, where third-party sellers are loosely policed, and the failure stays hidden until the real limit is crossed, often during a one-time event that cannot be repeated.

How counterfeiters fake a card's capacity

Every SD and microSD card holds at least two chips: a flash memory chip that stores data, and a small controller that manages the flash & tells the host device how large the card is. Because cheap flash is riddled with manufacturing defects, the controller runs updatable firmware rather than fixed read-only code, and that firmware can be rewritten after the card leaves the factory. Counterfeiters exploit exactly this. The hardware researcher Andrew "bunnie" Huang, who reverse engineered SD controllers and presented the work at the 2013 Chaos Communication Congress, described watching the alteration happen at the point of sale in the electronics markets of China:

they load a firmware that reports the capacity of a card is much larger than the actual available storage

Andrew Huang describes counterfeiters loading firmware that reports a card's capacity as much larger than its actual available storage.

The flash underneath is often the cheapest available. Huang found that the memory inside cards can be anything from high-grade factory-new silicon to material with over 80% bad sectors, and that vendors commonly use recycled chips salvaged from discarded parts. The SD Association, the standards body founded by the SD card's inventors, describes the same fraud from the enforcement side: a card whose packaging states 256 GB may in fact hold only 16 GB, and some counterfeiters add software that masks the true size so a computer still reads the card as 256 GB. Because the host device relies entirely on the controller to report the available space, and TP-Link notes that a 32 GB card can be made to appear as 128GB on your device, the operating system has no way to detect the lie on its own.

The SD Association explains that a counterfeit card can be packaged as a 256GB card yet actually hold only 16GB.

What total data loss looks like

A counterfeit card behaves normally until the moment the fraud matters. It formats, mounts, & accepts the first few gigabytes without any error, because that data lands on real flash. The trouble begins at the invisible boundary where writes cross the card's true capacity. From that point the firmware either overwrites the data already stored or drops the incoming data into nothing while still acknowledging the write, so the device shows no problem at all. How-To Geek describes the pattern:

these fakes look totally normal at first. They'll format just fine, copy some files, and overall work as intended. Until you hit that invisible limit and start writing data past the real, hidden capacity of the microSD.

Because the data was never written to physical memory, it is gone. Recovery software cannot rebuild files that the controller discarded or overwrote, and a card that reads back as empty filler is treated as unrecoverable. A refund does not change that: How-To Geek notes that Amazon's support staff, even when they help with a fake card, can't recover lost data. The storage vendor OWC told PetaPixel that counterfeit and relabeled cards

look fine on the outside, and don't reveal the lower-grade flash or fake capacity until the card is full or under load

The people who lose the most are those generating a continuous stream of data that cannot be recreated. PhoneArena traces the problem to a friend whose phone began failing after a new 64 GB card was installed, and warns that fake cards may result in irreversible data loss. Devices that record continuously onto the card, such as security cameras, are especially exposed to lost recordings & corruption once the real limit is reached. A single long audio recording, a wedding shoot, or a full day of dashcam footage is enough to cross the boundary, and the loss is discovered only when the files are opened later and turn out to be empty.

Where the fake cards are sold

Counterfeit cards reach buyers overwhelmingly through online marketplaces, and the marketplaces are a large part of why the problem persists. The SD Association warns that while it monitors e-commerce sites, the sites themselves often do not police their sellers, so a listing that looks legitimate can still ship a fake. Lexar, told by PetaPixel about counterfeit cards carrying its brand, acknowledged that counterfeit products can occasionally appear on open marketplaces such as Amazon, eBay, and others.

Two features of Amazon in particular make a fake hard to avoid. First, the seller behind a single listing can change without the buyer noticing. In a test covered by PetaPixel, the photographer Lee Morris showed that on one Amazon product page as you refresh this page, this sold by could change, so a shopper can end up buying from a different seller without even noticing. Second, for years Fulfillment by Amazon pooled units from different sellers of the same product in shared warehouse stock, so an order placed against a genuine listing could be filled from a bin that also held counterfeits. How-To Geek's Corbin Davenport summarized the consequence:

even if you specifically purchase something from a reputable brand, you could still end up with a counterfeit

The same report notes that buyers have documented Amazon deleting reviews that warned a card was fake, which keeps the warning signal off the listing.

The scale of the trade

The counterfeit trade is large and long-running. Since January 2011, SD-3C, the company that Panasonic, SanDisk, & Kioxia created to license and enforce the patents & trademarks essential to SD cards, has reviewed more than 2,700 customs detentions worldwide, and the majority ended in seizure & destruction of the goods. Seizures from January 2011 through December 31, 2018 totaled 3.9 million products with an estimated retail value of more than $56 million, and since 2013 SD-3C reported more than 125,000 counterfeit listings on e-commerce sites for removal. The seizures continue. SD-3C's public enforcement log records, among recent actions, United Arab Emirates customs officials seizing counterfeit SD cards with an estimated retail value of $330,000 in December 2025.

SD-3C's enforcement log records UAE customs officials seizing counterfeit SD memory cards with an estimated retail value of $330,000 in December 2025.

How to check a card before you trust it

Several signs mark a likely fake before any data is written. Price is the clearest. A genuine 1 TB SD card, by Pocket-lint's accounting, typically retails for anywhere between $130 to $200, so a 1 TB card advertised far below that, as cheap as $20-50, is most likely a scam. Lexar makes the same point, advising shoppers to be cautious of unusually low prices that appear significantly below market value on open marketplaces. Packaging & markings are the next tell: SanDisk states that microSD & SD cards with no rear markings are not made by SanDisk, which matches the blank, brand-free cards that show up in counterfeit orders.

Pocket-lint notes a 1TB SD card typically retails for $130 to $200, so one advertised as cheap as $20 is most likely a scam.

Appearance is no longer enough, because the outside of a modern fake is often indistinguishable from the real card. The only reliable check is to test the card's true capacity with software that writes data across the entire card & reads it back to confirm every byte survived. The common free tools are H2testw on Windows and F3 on macOS & Linux, both of which fill the card & verify the data, plus SD Insight on Android, which lists a genuine card's manufacturer and shows no manufacturer for a fake. Running such a test on a new card, before trusting it with anything, is the difference between catching the fraud on an empty card and discovering it after the data is already gone.

Consumer protection and its limits

United States law has started to hold the marketplaces accountable rather than chasing anonymous sellers. The INFORM Consumers Act, which took effect on June 27, 2023, was passed, in the Federal Trade Commission's words,

to make online transactions more transparent and to deter the online sale of stolen, counterfeit, or unsafe merchandise

It requires marketplaces to collect & verify identity, bank, & tax information from high-volume third-party sellers, defined as sellers with 200 or more transactions & at least $5,000 in gross revenue in a continuous 12-month period during the past 24 months, and to give shoppers a way to report suspicious listings; violations carry civil penalties of $53,088 each.

The Federal Trade Commission defines a high-volume third party seller as one with 200 or more transactions and at least $5,000 in gross revenues in a continuous 12-month period during the past 24 months.

That transparency is useful, but it does not repair the harm that counterfeit cards do. A buyer who receives a fake can usually recover the purchase price through a marketplace guarantee or a credit-card chargeback, yet no refund restores the destroyed data, because the files were never written to real memory and cannot be recovered. The money at stake in a counterfeit SD card is rarely the price of the card. It is the wedding, the concert, or the field recording that the card was trusted to hold, and that is the loss no remedy currently reaches.

See also

• Amazon
• Planned obsolescence
• Right to repair