Gift card scam: "I need a favor" emails
An email from your "boss" or a "colleague" asks you to buy gift cards in a hurry? It's a scam. Signs to look for and what to do if you already paid.
"Are you available? I need a favor." The message seems to come from your manager, a coworker or a relative. They are busy, can't talk, and ask you to buy gift cards and send them the codes. This is a very common scam.
How the scam works
- A short, vague first email: "Are you at your desk?" or "Quick favor, please."
- If you reply, the scammer says they're in a meeting or traveling, and need gift cards for a client, a gift or a surprise.
- They ask you to buy the cards, scratch off the back and send a photo or the codes. They promise to pay you back.
- As soon as you send the codes, the money is spent. Often they ask for more.
The display name is someone you know. The address behind it is a different domain, a free mailbox, or a near copy of the real one.
Signs to look for
- A very short, vague message with no real detail.
- An unusual request from that person: buying gift cards, keeping it secret.
- Urgency and no way to call: "I'm in a meeting, just reply by email."
- A sender address that doesn't match the usual one, or a different reply-to address.
- A promise of repayment later.
What to do
- Don't reply and don't buy anything.
- Contact the person another way: call a number you already have, or message them on another channel.
- At work, tell your IT team and your manager. Others have probably received the same email.
- Report it. In the US, use reportfraud.ftc.gov. In the UK, forward it to report@phishing.gov.uk.
What if I already sent the codes?
- Contact the card issuer right away with the receipts and the codes.
- Report it to the police, with the email as evidence.
- If the scammer knows personal details, change your passwords and tell your bank.
The workplace version of this trick is CEO fraud. For the general warning signs, read how to spot a phishing email.
Check it with Fishi
Forward the suspicious email to check@fishi.email, ideally as an attachment so the technical details are kept. Fishi looks at the sender, the links, attachments and the wording, then replies with a clear verdict and what to do next. It's free and needs no account. No tool is perfect: if in doubt, call the person yourself.