Cyber Security Awareness Poster
Think Before You Gift: Your Boss Won’t Ask for Gift Cards
The holiday season is a time for giving, but it’s also the prime time for gift card scams. Cybercriminals take advantage of the festive rush to trick employees into sending gift cards through deceptive emails, texts, or phone calls.
The scam is simple: fraudsters impersonate a boss, executive, or coworker and urgently request gift cards under the guise of company generosity or a holiday reward program.
Understanding these scams and knowing how to spot them is crucial to protecting yourself and your workplace from financial and cybersecurity threats.
How the Gift Card Scam Works
Scammers use social engineering tactics to make their requests seem legitimate.
- Initial Contact: You get an urgent message that looks like it’s from your boss — “Hey, can you help me with a quick favor? I need some gift cards for the team.”
- The Request: They tell you to buy Amazon, Apple, Google Play, or Visa gift cards and send the codes and PINs right away.
- Avoiding Verification: They’ll say they’re “in a meeting” or “can’t talk right now” to stop you from calling.
- The Loss: Once they have the codes, the money disappears instantly and can’t be recovered.
Why Gift Cards?
Gift cards are a favorite among scammers because:
- They’re like cash — once the balance is spent, it’s gone.
- They’re hard to trace — gift card purchases can’t easily be tracked.
- They don’t require hacking — scammers rely on tricking people, not breaking systems.
According to the Federal Trade Commission (FTC), Americans lost more than $200 million in 2024 to gift card scams, especially during the holidays. Read more about it here: FTC Gift Card Scam Report.
How to Spot a Gift Card Scam
- Urgent and Pressuring Tone — The message pushes you to act fast.
- Unusual Request — Your boss wouldn’t normally ask for gift cards.
- Suspicious Email Address — Look closely for small spelling differences (like
@c0mpany.cominstead of@company.com). - Refusal to Confirm — If they won’t take a quick call, that’s a red flag.
- Request for Codes and PINs — No legitimate manager will ever ask for this over email or text.
How to Protect Yourself
1. Verify Before You Buy
If something feels off, call the person directly using a number you already know — not the one in the message. Never buy gift cards until you confirm.
2. Report Suspicious Messages
Forward scam messages to your IT or security team right away. You can also report scams to the FTC at reportfraud.ftc.gov.
3. Educate Your Team
Remind coworkers that no one will ever request gift cards over email or text. A quick reminder can prevent thousands in losses.
If You Already Fell for the Scam
If you sent card info to a scammer:
- Contact the store or brand immediately (Amazon, Apple, etc.) — they may be able to freeze the card.
- Tell your employer and IT team so others don’t fall for the same trick.
- Report it to the FTC to help track and stop these scams.
Stay Cyber-Safe This Holiday Season
Scammers know that during the holidays, people are busy and act quickly. Stay alert, question urgent messages, and verify before you buy.
REMEMBER: If your boss needs something, they’ll call you — not ask for gift cards over email.
CourseVector grants permission to use this artwork for any non-commercial purpose as long as the CourseVector contact information remains, as is, on any reproduction or use.
