Are we sure it was the gift cards? Obviously gift cards are often used in various scams etc, but they should have a way to allow folks to prove they purchased them.
My own guess would be maybe gift cards and overseas IP access if there was some of that, the only thing I can think of (that would be a somewhat high flag in the algo's potentially).
A reversed payment in chain somewhere?