Email messages from the boss:

"Hey Anna,

Great job on the presentation today. What software program did you use?"

***

If you give the gift card numbers and PINs to a scammer, you must act fast. Scammers will try to spend it before you realize it wasn't your boss requesting the information.

"Hi Jimmy,

I've been meaning to ask you. What year is your car? I'm helping my nephew with his used car search. Thanks!"

***

"You had a great month, Becky. Keep up the good work. Do you have a time-management tip you can share with your co-workers?"

***

Sounds like Anna, Jimmy, and Becky work for a great boss. He congratulates them on their stellar performance and appears genuinely interested in getting to know them. But, there's one thing that their boss will say that they won't see coming.

Scammers Take on Many Roles

Scammers take on many roles. Popular performances include government employee, IT help desk worker, and online retailer. Now, they're pretending to be your boss – someone who saying ‘no’ to could lead to problems at work. The request appears benign. Well, actually – that's probably why you should worry.

Another email message from the boss:

"Hey Anna,

Could you do me a favor? I'm in a bind. Would you please pick up some gift cards for me when you head out to lunch?

I need them to cover the expenses for an office surprise party I'm throwing next week. I won't get corporate approval on the expenses by then, so I'll need you to get the cards and send over the gift card numbers and PINs via email as soon as you come back from lunch. I need the numbers so I can order the party favors online.

P.S. Remember – don't tell anyone. I want it to be a surprise."

Boss Impersonation Scam

This email, and the one you received before, are likely part of a new impersonation scam. Fraudsters will hack your boss’s email account or spoof the email address to convince you the email is legitimate. They start by sending a "test" email to make sure they have a live person on the other end. Once they realize they have a responsive employee, they swoop in with the second email requesting help that somehow involves you needing to purchase gift cards.

When you reply to the email with the requested information, the scam is complete. The money is now in the hands of the scammer and is unlikely to be recovered.

How to Avoid the Boss Impersonation Scam

If you receive an unexpected request to purchase gift cards, don't do it before:

  • Checking with your boss in-person or calling them at a known phone number. Do not attempt to confirm the request via email.

  • Talking about it with another senior employee if you can't reach your boss. They can help you get to the bottom of the request.

Remember that gift cards are one of the most common payment scams.

You've Been Scammed – Now What?

If you give the gift card numbers and PINs to a scammer, you must act fast. Scammers will try to spend it before you realize it wasn't your boss requesting the information.

Contact the retailer that issued the card. Explain the situation. They may refund the money if you still have the gift card and receipt.

Tell your boss about the incident. They may have a specific company procedure you need to follow to help recoup the funds.