Is an email from my CEO asking me to urgently buy gift cards and send the codes a scam?
Yes. CEO gift card impersonation is one of the most common and consistently effective business email scams.
Last reviewed: 1 June 2026
Explanation
CEO fraud or executive impersonation via email is a well-documented and frequently successful attack. An employee — often in finance, HR, or a support role — receives an email that appears to come from the CEO, managing director, or another senior executive. The message is typically short, informal, and urgent, asking the employee to purchase gift cards immediately as a gift for clients, a bonus for staff, or a confidential business purpose, and to send the codes by reply. The email address is either spoofed to display the executive's name or is a lookalike domain. Gift card codes are untraceable and irreversible. Establish a verbal confirmation policy for all gift card or payment requests — never act on such requests from email alone.
Common red flags
- Email from an executive asks you to buy gift cards urgently without explanation
- Sender email address does not exactly match your company's real domain
- Message emphasises secrecy or speed — do not discuss with colleagues
- Request came on a Friday afternoon, a holiday, or outside normal working hours
What to do now
- Do not buy gift cards without verbal confirmation directly with the executive
- Call the executive on their known number — do not use any number provided in the email
- Report the email to your IT security team immediately
- If cards were already purchased, contact the gift card issuer and your bank
Frequently asked questions
Why do scammers ask for gift cards specifically?
Gift card codes are instantly usable, untraceable, and irreversible. They are the cash equivalent for phone and email fraud because no bank can reverse the transaction once codes are shared.