Nina Kollars - Confessions of an Nespresso Money Mule

The Accidental Coffee Fraud

Nina Kollars (security researcher and professor, Naval War College) delivers a hilarious and insightful true story about accidentally discovering and exploiting a business logic vulnerability in Nespresso's coffee capsule loyalty program.

The Discovery

While making a legitimate purchase, Kollars discovers that Nespresso's reward point system contains a logic flaw: returning capsules generates points independent of the original purchase transaction, enabling unlimited point generation through a cycle of purchase, return, and repeat.

Escalating the Exploit

What begins as a casual observation becomes a systematic investigation, with Kollars documenting the full scope of the vulnerability, the economics of the exploit (maximum point generation rate vs. time invested), and the logistical challenges of laundering coffee capsules.

Security Lessons

Beyond the entertainment value, the talk provides a serious analysis of business logic flaw discovery methodology, the ethics of exploiting vendor vulnerabilities for personal gain, and how loyalty program fraud scales into multi-million dollar criminal enterprises.