By J. Mesa
Your boss emails you. She is stuck in a meeting and needs five $100 gift cards for client gifts. Buy them now, scratch off the backs, and send photos of the codes. You will be reimbursed today. The email came from a stranger, and the money is gone the moment you hit send. December brings a surge of these requests, because buying gift cards looks normal this month.
What is a gift card scam?
A gift card scam is a fraud in which a criminal persuades you to buy gift cards and hand over the numbers and PINs. With those numbers, the criminal spends or resells the balance within minutes.
One rule covers every version: gift cards are for gifts. Anyone who demands payment by gift card is a scammer. No government agency, utility, court, bank, or tech company accepts them.
Why do scammers want gift cards?
- Speed. The value moves the instant you read out the numbers.
- Anonymity. Nobody needs an ID or a bank account to redeem a card.
- No reversal. A gift card lacks the dispute rights of a credit card.
- Availability. Every grocery store and pharmacy sells them.
Criminals turn the balances into cash by buying electronics to resell or by selling the codes at a discount on online marketplaces.
What are the common gift card scams?
- The fake boss. An email or text that appears to come from an owner, a manager, a pastor, or a principal asks an employee to buy cards for clients or staff and keep it quiet.
- Government impersonators. A caller claims to be from the IRS, Social Security, or a court and threatens arrest unless you pay a fine with gift cards.
- Tech support. A pop-up or a caller says your computer is infected and takes payment for the “repair” in gift cards.
- Utility shutoff. A caller says your power goes off in an hour unless you pay now.
- Family emergency. A caller posing as a grandchild or a lawyer needs bail money.
- Romance. An online sweetheart you have never met needs help with an emergency.
- Prizes and sweepstakes. You won, and you owe “taxes” or “fees” first.
- Overpayment. A buyer sends a check for too much and asks for the difference back in gift cards. The check bounces later.
How does the fake boss gift card scam work?
This version targets businesses, schools, churches, and nonprofits.
- The scammer finds the name of the owner or director on your website, and a list of staff.
- The scammer creates a free email account with the boss’s name as the display name, or sends a text from an unknown number that opens with “Hi, this is [boss’s name].”
- The first message is short: “Are you at your desk? I need a quick favor.”
- Once the employee answers, the request arrives: buy gift cards, keep it confidential, send the codes.
- The scammer asks for more cards until the employee stops.
It works because employees want to help the boss and because the boss is “in a meeting” and can’t take a call. New employees get targeted most, since scammers watch LinkedIn for job announcements.
What are the warning signs?
- Any request to pay with a gift card
- Urgency, with a deadline measured in minutes or hours
- A request for secrecy, or an instruction to lie to the cashier about why you are buying
- An order to stay on the phone while you shop
- A request to buy cards at several different stores
- A request to photograph or read out the numbers on the back
- An email from the boss that comes from a personal address, or a text from an unknown number
How do I protect my business?
- Write the rule down. The company never buys gift cards on the strength of an email or a text. Purchases follow the normal approval process.
- Verify by voice. Any unusual request for money or cards gets a phone call to a known number, or a walk down the hall.
- Tell every new hire in the first week. Scammers reach new staff within days of a public announcement.
- Tag external email. A banner that marks outside messages exposes a fake boss.
- Have the owner say it out loud: “I will never ask you to buy gift cards. If you get that message, it is not me.”
- Limit what the website gives away. Review whether you need a full staff directory with titles and direct email addresses.
- Cover it in training. See our post on how to spot a phishing email and our cybersecurity training.
How do I protect my family?
Talk about it at the holiday table. Older relatives lose the most, and many have never heard that gift card payment is the mark of a scam. Agree on a simple plan: if a caller demands money, hang up and call a family member before doing anything. Tell the grandparents that a real grandchild in trouble will still be in trouble ten minutes from now, after a callback.
What should I do if I gave a scammer gift card numbers?
Move fast. Minutes matter.
- Call the gift card company right away and say the card was used in a scam. Ask whether any balance remains and whether they can freeze it. The phone number is on the back of the card or on the company’s website. Apple, Google Play, Amazon, Target, Walmart, and the major prepaid card brands all run fraud lines.
- Keep the card and the receipt. You need both for the report.
- Tell the store where you bought the cards.
- Report it to the FTC at ReportFraud.ftc.gov and to the FBI at ic3.gov.
- Tell your employer if the request posed as your boss. Others in the company may be getting the same message.
- Stop responding to the scammer. Expect follow-up contacts that promise to recover your money for a fee. Those are scams too.
Can I get my money back?
Sometimes, if the scammer has not yet spent the balance when you call. Once the funds are used, recovery is unlikely. That is the reason criminals prefer gift cards, and the reason to call the card company before you do anything else.
What is gift card tampering?
A different crime hits honest shoppers. Thieves take cards from store racks, record the numbers and PINs, reseal the packaging, and return the cards to the shelf. When a shopper loads money onto the card, the thief drains it.
Protect yourself when you buy gift cards as gifts:
- Inspect the packaging. Skip any card with a torn, wrinkled, or resealed wrapper, or a scratched PIN cover.
- Pick cards from behind the counter or from the middle of the rack.
- Buy from the retailer’s own website when you can.
- Keep the receipt and give it with the card.
- Tell the recipient to use the card soon.
What should retail staff watch for?
If your business sells gift cards, your cashiers are the last line of defense. Train them to notice a customer who is on the phone while buying, seems frightened or rushed, buys large amounts, or is elderly and buying cards for a brand they would not normally use. A calm question can stop the loss: “Did someone ask you to buy these to make a payment?” Post a warning sign at the rack. Many retailers now do.
Are other payment methods a warning sign too?
Yes. Scammers also demand wire transfers, cryptocurrency, payment apps such as Zelle and Cash App, and cash sent by mail or handed to a courier. Each shares the traits that make gift cards attractive: fast, hard to trace, and hard to reverse. Treat a demand for any of them, from someone you did not contact first, as a scam.
Your next step
Send a two-line message to your staff today: “I will never ask you to buy gift cards by email or text. If you receive that request, call me.” Then make the same promise to your family. For help writing payment verification rules and training your team, see our services or contact Cerberus Cybersecurity.