Boss Gift Card Scam: How to Spot and Avoid It

Introduction

The boss gift card scam is one of the most widely reported workplace frauds in the United States and United Kingdom in 2026. The Federal Trade Commission published a specific consumer alert about the boss gift card scam in January 2026, warning employees that scammers are posing as their managers, executives, and CEOs — sending fake emails and text messages asking them to urgently purchase gift cards on the company’s behalf. If you have received an unexpected message from what appears to be your boss asking you to buy gift cards, this comprehensive guide from Scammers Expose will give you everything you need to know.

The boss gift card scam — also known as the CEO fraud gift card scam or executive impersonation scam — exploits the power dynamics of the workplace in a particularly clever way. Employees are conditioned to respond promptly to requests from senior management, to prioritise requests marked as urgent, and to avoid questioning their superiors unnecessarily. The boss gift card scam weaponises these entirely reasonable professional behaviours — creating a situation where the victim’s normal workplace instincts work against them rather than protecting them.

The boss gift card scam has proven remarkably durable as a fraud category because it requires almost no technical sophistication to execute — just a convincing email address or text message — and because gift cards remain the most untraceable and irreversible payment method available to fraudsters. Gift card losses from workplace impersonation scams including the boss gift card scam run into tens of millions of dollars annually, with the average individual employee loss typically ranging from $200 to $2,000 per incident.

This guide from Scammers Expose provides a thorough breakdown of the boss gift card scam: how it reaches employees, how it unfolds step by step, the specific warning signs every worker must know, real stories from affected employees, what the FTC and consumer authorities say, and the steps you must take if you have already received or responded to a suspicious request. Understanding the boss gift card scam fully is your most effective workplace protection against this fraud.

What Is the Boss Gift Card Scam?

The boss gift card scam is a workplace impersonation fraud in which criminals send emails or text messages to employees while pretending to be the employee’s manager, director, CEO, or another senior figure within the organisation. The message requests that the employee purchase one or more gift cards — typically Google Play, iTunes, Amazon, or Steam — and share the redemption codes, with the promise that the employee will be reimbursed once the urgent need is resolved.

The boss gift card scam is a variant of business email compromise fraud — a broader category that costs businesses globally billions of dollars annually. Unlike more complex BEC attacks that involve invoice fraud or wire transfer manipulation, the boss gift card scam is simple, low-cost to execute, and highly scalable. A criminal with a list of company employees, a manager’s name, and basic knowledge of the organisation’s structure can launch dozens of boss gift card scam attempts simultaneously at virtually no cost.

The boss gift card scam specifically exploits the gift card payment mechanism for the same reason that all gift card scams do — gift cards are immediate, anonymous, irreversible, and universally accessible. Once an employee shares gift card codes with a scammer, the money is gone. PayPal cannot reverse it. The bank cannot recover it. The police cannot easily trace it. The codes are redeemed immediately through anonymous online accounts, converted to cash, and distributed through criminal networks before any investigation can begin.

How the Boss Gift Card Scam Works Step by Step

Step 1: Research and Target Selection

The boss gift card scam begins with research. The criminal identifies a target organisation and collects publicly available information about its structure — typically through the company’s website, LinkedIn profiles, and any publicly available company information. From this research, the criminal identifies a senior figure to impersonate — ideally the CEO or managing director — and an employee to target, typically someone in an administrative, finance, or executive assistant role who would plausibly receive requests from senior management and would have access to funds for purchases.

Some boss gift card scam operators do not conduct targeted research at all — they send mass messages to randomly selected employees using company email addresses harvested from data breaches or LinkedIn, impersonating whatever executive name appears in publicly available company information. Even without targeted research, the boss gift card scam succeeds with sufficient frequency to be profitable when sent at scale.

Step 2: The Fake Message Arrives

The employee receives an email or text message that appears to be from their boss. The boss gift card scam email is typically sent from an address designed to look like the executive’s genuine address — either a free email account using the executive’s name (john.smith@gmail.com instead of john.smith@company.com) or a domain spoofed to look almost identical to the company’s genuine domain (company-corp.com instead of company.com). In some cases the criminal has actually compromised the executive’s genuine email account and is sending from the real address — making detection essentially impossible through email header inspection alone.

The message is typically brief, informal in tone, and urgent in nature. Common formulations include: “Hi [name], I’m in a meeting and need your help urgently. Can you purchase some gift cards for me? I’ll explain more in a moment. Are you available?” The informality mimics genuine messaging from busy executives, and the vague urgency creates compliance without triggering immediate scrutiny.

Step 3: The Initial Exchange and Trust Building

When the employee responds, the boss gift card scam operator continues the conversation with a plausible explanation for the request. Common cover stories include: the executive needs gift cards as client appreciation gifts for an important meeting happening today, the company’s corporate account has a processing issue and gift cards are needed as a temporary workaround, gift cards are being collected for a company charitable event, or the executive is travelling and needs gift cards for business use. The explanation is designed to be just plausible enough for an employee who trusts their manager to accept without excessive questioning.

Step 4: The Gift Card Purchase Request

The boss gift card scam then makes the specific purchase request — typically asking the employee to buy one or more gift cards of a specific brand and denomination. Common brands requested include Google Play, iTunes/Apple, Amazon, Steam, eBay, and Walmart. Denominations are typically $100 to $500 per card, with total requests ranging from $200 to $2,000. The employee is asked to purchase the cards from a local shop using their own money, with a promise of reimbursement. They are instructed not to tell colleagues about the purchase — framed as a confidentiality requirement for the business purpose being served.

Step 5: Sharing the Codes

Once the employee has purchased the gift cards, the boss gift card scam instructs them to photograph or type the redemption codes from the back of the cards and send them to the email or phone number being used in the fraud. The moment these codes are shared, the boss gift card scam is complete. The codes are redeemed immediately — typically within minutes — through anonymous online accounts. Once redeemed, the balance cannot be recovered.

Step 6: The Escalation and Discovery

After the initial codes are shared, the boss gift card scam frequently escalates with a request for additional gift card purchases — citing a need for more cards for the same purpose. Some employees make multiple purchases before becoming suspicious. Discovery of the fraud typically occurs when the employee mentions the purchase to their genuine manager, colleague, or employer — and discovers the request was never genuine. At this point the gift card codes have already been redeemed and the loss is permanent.

Boss Gift Card Scam: The Most Common Variants

The Classic Email Impersonation

The most prevalent variant of the boss gift card scam uses a lookalike email address — either a free email account using the executive’s name or a slightly altered company domain. The email is brief, urgent, and informal — mimicking the communication style of a busy executive. This variant is sent at high volume to many employees simultaneously across multiple organisations, with the expectation that a small percentage will comply before recognising the fraud.

The Text Message Variant

This variant of the boss gift card scam uses SMS text messages rather than email — claiming to be from the executive’s personal mobile and explaining that they are using a different number due to a phone issue or while travelling. Text messages feel more personal and immediate than email, and the informal nature of texting further reduces the scrutiny that a formal email might trigger. This variant is particularly effective when the employee does not have the executive’s genuine mobile number saved to compare against.

The Compromised Email Account Variant

The most sophisticated and difficult-to-detect variant of the boss gift card scam involves the criminal actually gaining access to the executive’s genuine email account — through phishing, credential theft, or a data breach — and sending the gift card request from the real account. This variant is essentially undetectable through standard email verification checks because the message genuinely originates from the executive’s account. Detection relies on recognising the content of the request as inconsistent with legitimate business practices — the only reliable defence.

The Charity Collection Variant

This variant of the boss gift card scam frames the gift card purchase as a charitable initiative — the executive is collecting gift cards to donate to a local food bank, children’s charity, or disaster relief fund. This framing makes the request seem not only plausible but virtuous — the employee is helping a good cause at the direction of their employer. The charitable context also makes the employee less likely to question the unusual payment method, since gift cards are a common charitable donation format.

The Client Appreciation Variant

This variant of the boss gift card scam claims the gift cards are needed as last-minute client appreciation gifts for an important meeting or event happening the same day. The time pressure of a same-day business need creates urgency that discourages the employee from questioning the process of why gift cards are being purchased personally rather than through standard procurement. Client gift-giving is a sufficiently common business activity that this variant generates strong compliance rates.

Boss Gift Card Scam Warning Signs

• The request came from an email address that is not the executive’s genuine company address: Always check the sender’s full email address — not just the display name — before responding to any urgent request. A boss gift card scam email from “John Smith” at john.smith@gmail.com is not from the real John Smith at your company. Display names can be set to anything — the actual address is the only reliable identifier
• The message asks you to buy gift cards for any business purpose: No legitimate business purpose requires gift cards purchased personally by an employee with personal funds. Gift cards are not a standard corporate payment method. Any business request for employee-purchased gift cards — regardless of the stated reason — is a definitive boss gift card scam warning sign
• The request is marked as urgent and asks you to keep it confidential: The combination of urgency and confidentiality is a signature boss gift card scam tactic. Genuine business requests that are urgent can still be verified through normal channels. Any request that combines urgency with a specific instruction not to discuss it with colleagues should be treated as a boss gift card scam
• The executive is described as unavailable to speak — in a meeting, on a plane, or travelling: The boss gift card scam always provides an explanation for why the executive cannot be contacted directly to verify the request. If the person making an urgent financial request cannot be reached by phone to confirm it, that inability to verify is itself a warning sign
• You are asked to share gift card codes by email or text: Legitimate gift card distribution for business purposes — such as client gifts — would never involve an employee photographing card codes and texting them to an executive. The request for codes to be shared digitally is a defining feature of the boss gift card scam extraction process
• The request escalates after the first purchase: Being asked to purchase additional gift cards after the first batch has been supplied is a clear sign of the boss gift card scam escalation pattern. Each additional purchase should trigger renewed scrutiny and an immediate attempt to verify the request through independent means
• The tone is unusually informal for the executive: While the boss gift card scam attempts to mimic the communication style of the impersonated executive, subtle inconsistencies in tone, language, or typical communication patterns may be detectable. If a message from your CEO uses language or phrasing inconsistent with their normal style, treat it as a potential boss gift card scam
• The sender’s email domain differs slightly from the company domain: The boss gift card scam frequently uses domains that are one character different from the genuine company domain — adding a letter, swapping a character, or using a different top-level domain. Always examine the full domain carefully before responding to any urgent financial request

Real Stories: How the Boss Gift Card Scam Affects Real People

Story 1: The Office Manager and the CEO Email

An office manager at a mid-sized marketing agency received an email from what appeared to be her CEO’s address. The message said the CEO was in a client meeting and needed her to purchase $800 in Google Play gift cards for a client appreciation gift that had been forgotten in the rush of the day. She was asked to buy the cards from a nearby shop and text the codes to him directly — he would reimburse her through expenses that afternoon.

She purchased eight $100 cards and texted the codes as instructed. When the genuine CEO returned from his meeting and she mentioned reimbursement, he had no knowledge of the request. The email had come from a domain one letter different from the genuine company domain — a detail she had not noticed. The boss gift card scam had cost her $800 that her employer compassionately agreed to partially reimburse, covering $500 of the loss — but the remaining $300 came from her own pocket.

Story 2: The Finance Assistant and the Multiple Purchases

A finance assistant at a construction company received a text message from an unknown number claiming to be the managing director — explaining he had left his work phone at the office and was using a temporary number while travelling abroad for a client meeting. He needed iTunes gift cards purchased urgently for a business gift and asked her to buy $500 worth and share the codes.

She purchased the cards and shared the codes. The “MD” then asked for a further $500 worth, explaining the client needed more. She made a second purchase. When she attempted a third purchase at the shop, the cashier — recognising the boss gift card scam pattern — asked her whether she was being asked to buy these by someone she had not met in person. She called the MD’s genuine office number and discovered the fraud. She had lost $1,000 — two purchases worth — before the cashier’s intervention prevented a third.

Story 3: The New Employee Who Did Not Want to Question Her Boss

A recently hired administrative assistant received an email appearing to come from the director of her department — whose communication style and email address she was still learning. The message asked her to purchase Amazon gift cards worth $400 for a team recognition award that needed to be delivered today, explaining that the normal procurement process was too slow for this urgent need.

As a new employee, she was particularly reluctant to question a request from a senior colleague — worried about appearing unhelpful or difficult in her first weeks. She purchased the cards and emailed the codes. When she subsequently submitted the expense claim, the director had no knowledge of the request. The boss gift card scam had specifically exploited the vulnerability of a new employee’s professional insecurity — targeting someone who was least likely to push back on a request from management.

What the FTC Says About the Boss Gift Card Scam

The Federal Trade Commission published a specific consumer alert about the boss gift card scam in January 2026, specifically warning employees that scammers pretend to be bosses asking them to buy gift cards. The FTC’s guidance is clear and unequivocal: no legitimate employer will ever ask an employee to purchase gift cards with personal funds for any business purpose. The FTC notes that while the gift-giving holidays may be over, scammers continue to use this tactic throughout the year — and that the workplace trust dynamic makes it particularly effective. Report and review FTC guidance at consumer.ftc.gov/scams and reportfraud.ftc.gov.

The FBI’s Internet Crime Complaint Center documents business email compromise fraud — of which the boss gift card scam is the most common consumer-facing variant — as one of the highest-loss cybercrime categories, costing businesses globally billions of dollars annually. The FBI’s IC3 accepts BEC fraud reports at ic3.gov and specifically encourages employees who have received suspicious gift card requests to report them even if no money was lost.

Action Fraud in the United Kingdom documents the boss gift card scam as a significant and growing category of workplace fraud, noting that the combination of remote working — which has reduced opportunities for employees to physically verify requests with colleagues — and digital communication has made the impersonation easier to sustain for longer. Report UK workplace fraud at actionfraud.police.uk or call 0300 123 2040.

The Better Business Bureau has documented the boss gift card scam extensively through its Scam Tracker and publishes regular alerts about new campaigns. Research and report at bbb.org/scamtracker.

How to Protect Yourself and Your Workplace from the Boss Gift Card Scam

Always Verify Unusual Requests Through a Different Channel

The single most effective protection against the boss gift card scam is verifying any unusual request — particularly one involving money or gift cards — through a completely different communication channel from the one through which the request arrived. If the request came by email, call the executive on their known phone number. If it came by text, send a message through the company communication platform. Do not reply to the original message, do not use any contact details provided in the message, and do not assume that a matching email address or display name is proof of authenticity. This one verification step defeats the boss gift card scam every time.

Know That No Legitimate Business Purpose Requires Employee-Purchased Gift Cards

This rule has no exceptions. No legitimate business scenario requires an employee to purchase gift cards with personal funds and share the codes with a manager. Genuine corporate gift-giving is handled through official procurement processes, company accounts, and authorised suppliers. Any request that bypasses these processes by asking an employee to purchase gift cards personally is either a boss gift card scam or a serious policy violation that should be escalated to HR or compliance — not complied with unilaterally.

Always Check the Full Email Address

Train yourself to always check the complete sender email address — not just the display name — before responding to any email request involving money, gift cards, or sensitive information. The boss gift card scam relies on employees not looking past the display name. Most email clients display the display name prominently and the email address less visibly. Make it a habit to click on the sender name to reveal the full address for any urgent or unusual request.

Create a Workplace Policy and Share It

If you are a business owner, manager, or HR professional, create a clear written policy stating that gift card purchase requests from management — particularly those received by email or text — must always be verbally verified before any purchase is made. Share this policy with all employees and specifically brief new starters on the boss gift card scam pattern. The best defence against the boss gift card scam at an organisational level is ensuring every employee knows the scam exists and knows they are explicitly permitted and encouraged to verify such requests.

Empower Employees to Question Requests Without Fear

The boss gift card scam specifically exploits the professional reluctance of employees — particularly junior or new employees — to question requests from senior management. Creating a culture where employees feel empowered to verify unusual requests without fear of appearing difficult or insubordinate is essential. Make it explicit that questioning any unusual request involving money is not just acceptable but expected. An employee who calls their CEO to verify a $500 gift card request is protecting the company — not being obstructive.

What to Do If You Have Already Been Targeted

Report to Your Manager and IT Department Immediately

If you have received a boss gift card scam message — whether or not you have already purchased gift cards — report it immediately to your genuine manager, your IT or security team, and your HR department. Your IT team needs to know about the impersonation attempt to investigate how the scammer obtained company information and to alert other employees who may have received the same message. Your report protects your colleagues from the same fraud.

Contact the Gift Card Issuer If Codes Were Shared

If you have already shared gift card codes as a result of the boss gift card scam, contact the gift card issuer immediately — Google, Apple, Amazon, Steam, or whichever brand was purchased. Report that the cards were used in a fraud and provide the card numbers. If the codes have not yet been redeemed, the issuer may be able to freeze the balance. This action must be taken as quickly as possible — codes are typically redeemed within minutes of being shared.

Report to the FTC and FBI IC3

Report the boss gift card scam to the FTC at reportfraud.ftc.gov and to the FBI’s Internet Crime Complaint Center at ic3.gov. Business email compromise fraud including the boss gift card scam is a federal crime in the United States — your report contributes to investigations that may lead to prosecutions. UK victims should report to Action Fraud at actionfraud.police.uk.

Do Not Be Ashamed — Report Honestly

Many victims of the boss gift card scam are reluctant to report the fraud because they feel embarrassed or worried about professional consequences. This reluctance is entirely understandable but counterproductive. The boss gift card scam is a sophisticated fraud that specifically exploits normal, professional workplace behaviour. Falling for it is not evidence of incompetence — it is evidence that the scam is well-designed. Reporting honestly and promptly gives your organisation and law enforcement the best chance of limiting further harm.

Conclusion

The boss gift card scam is a fraud that turns the professional trust and responsiveness of employees into a vulnerability. It exploits the entirely reasonable workplace habit of promptly helping senior colleagues — particularly in situations framed as urgent — and uses that helpfulness to extract money through an irreversible payment method before the employee has time to verify the request.

The defence against the boss gift card scam is one absolute rule: always verify unusual requests through a different communication channel before taking any action, and know that no legitimate business purpose ever requires an employee to purchase gift cards with personal funds. These two principles, combined with a workplace culture that empowers employees to question unusual requests without fear, make the boss gift card scam impossible to succeed in your organisation.

If this article helped you understand the boss gift card scam, please share it with every colleague, manager, and business owner you know. The boss gift card scam is most effectively defeated by awareness — and a workplace where every employee knows what this fraud looks like is a workplace where it cannot succeed. For more scam alerts and consumer protection advice, visit Scammers Expose.

Related Articles

If you found this article helpful, you may also want to read these related scam awareness guides:

• Amazon Gift Card Scam: Warning Signs You Must Know
• Imposter Scam Warning Signs: How to Spot and Avoid It
• Bank Impersonation Phone Scam: How to Spot and Avoid It
• Work From Home Job Scam: How to Spot and Avoid It
• Government Grant Scam: How to Spot and Avoid It