In this guide 10 sections
At a glance
The short version.
Watch for
- Any request to pay a bill, fine, tax, fee or debt with gift cards
- A ‘boss’ or colleague asking for an urgent favour that involves buying gift cards
- Exact instructions on which cards to buy, where to buy them or to use several shops
Already acted?
Contact the company that issued the gift card straight away, using the details on the card or its official website, and tell it the card was used in a scam.
See every recovery stepWhat is changing now
The current pattern.
Official warnings about gift card payment demands continue. A January 2026 FTC alert describes messages that appear to come from a boss asking for an urgent favour, sometimes avoiding the words ‘gift card’ altogether. In April 2025 Switzerland’s National Cyber Security Centre reported a wave of emails impersonating senior local-government staff and asking employees to buy online gift cards. A separate risk sits on the shop display: the FTC has warned that criminals can tamper with cards to record the number and PIN, then wait for a buyer to load money onto them.
How it works
How the scam unfolds.
The opening story is chosen to fit the target. Official guidance describes callers posing as government agencies demanding taxes or fines, tech-support staff claiming a computer has a problem, utility companies threatening to cut off service, prize organisers asking for fees, romantic partners met online, relatives in an emergency — sometimes using a cloned voice — and managers asking an employee for an urgent favour. Most add pressure to act now, and some ask you to keep it to yourself.
Whatever the story, the instructions are strikingly similar. The scammer names the type of card and often the shop, may suggest buying from several shops so cashiers are less likely to ask questions, and may stay on the phone while you buy and load the cards. Then comes the real goal: the number and PIN from the back of each card, read out, typed or sent as a photo. With those details the balance can be spent without the physical card, and once it has been used the money is gone.
That is why the payment method matters more than the story. No genuine business or government agency tells people to buy gift cards to pay it, so you do not need to work out whether the problem, prize or emergency is real. At work, the request is often prepared using public information about who manages whom, and sent from a look-alike or free email address while the ‘manager’ is said to be unavailable. In every version the protection is the same: stop, and check with the person or organisation using contact details you already trust.
Warning signs
Reasons to stop and verify.
- Any request to pay a bill, fine, tax, fee or debt with gift cards
- A ‘boss’ or colleague asking for an urgent favour that involves buying gift cards
- Exact instructions on which cards to buy, where to buy them or to use several shops
- A request for the card numbers and PINs, or a photo of the back of the card
- A caller who wants to stay on the line while you go to the shop
- Pressure to act immediately and to keep it from family or colleagues
Spot the signs
What it can look like.
Highlighted phrases are warning signs; the numbered notes explain each one.
Daniel Okafor · Operations Director <daniel.okafor.director@freemail.example1 (warning sign 1)>
Urgent favour needed2 (warning sign 2)
Hi Sophie,
I’m in back-to-back meetings and can’t take calls3 (warning sign 3), but I need you to sort something out before 2 pm.
We’re thanking a few key clients today. Please buy six £100 gift cards4 (warning sign 4) from the supermarket round the corner — I’ll reimburse you this afternoon.
Once you have them, scratch off the backs and email me clear photos of the codes5 (warning sign 5).
Please keep this between us for now6 (warning sign 6) — it’s meant to be a surprise. Thanks, Daniel
- A free email address
The name is right, but the address is not the organisation’s own. Scammers use free and look-alike addresses that borrow a real colleague’s name, so a familiar name is not proof on its own.
- An urgent favour
Urgency is meant to make you act before you check. Fake ‘boss’ messages often open with an unexpected favour like this one.
- No way to call back
Saying they are stuck in meetings stops you confirming the request by phone — which is exactly the check that would expose it.
- Gift cards for a business purpose
Client thank-yous, events and presents are common cover stories. Any request to buy gift cards outside the normal purchasing process needs checking.
- A request for the codes
The number and PIN on the back are all anyone needs to spend the balance. Nobody needs photos of the codes to give a genuine gift.
- Secrecy
Asking you to keep quiet stops colleagues or managers from asking the questions that would reveal the scam.
Check with your manager in person or on a number you already have — not by replying — before buying anything. A genuine request will survive the check.
Composite example: names, numbers and “.example” addresses are fictional.
Worked example
A realistic pattern, separated into evidence.
This composite example is educational. It does not describe a real person or reproduce a live malicious message.
A disconnection call that ends at the gift card rack
- 01The opening
A caller says they are from the household’s energy supplier. An overdue balance means the power will be cut off within the hour, they say, unless it is settled now.
- 02The escalation
The caller explains that the fastest way to pay is with gift cards, names the kind of card to buy and suggests splitting the purchase between two shops. They offer to stay on the line during the trip, then ask for the numbers and PINs from the back of the cards.
- 03The decision point
Whether the account really is overdue does not need to be settled during the call. A demand to pay any bill with gift cards is enough on its own: the caller is asking for codes that can be spent as soon as they are shared.
Independent verification
Test the request without using its evidence.
These checks deliberately move the decision away from the person, link, number or account that introduced the request.
- 01
Let the payment method decide
You do not need to prove the story false. No genuine business or government agency tells people to buy gift cards to pay it, so the request alone is reason to stop.
- 02
Contact the organisation yourself
End the call or stop replying. Use a number or email address you already know is genuine — from a bill, your account or the organisation’s official website — never the details in the message.
- 03
At work, check through a known channel
Ask your manager in person or on their usual internal number, not by replying to the message. Follow your organisation’s normal purchasing and approval rules, whoever the request appears to come from.
- 04
Talk to someone you trust first
Scammers rush people so they have no time to think or ask anyone. Describing the request to a friend, relative or colleague before buying anything gives you that time back.
Prevention
Make the next attempt harder.
- 01
Decide that gift cards are only presents
Settle it now: you will never use gift cards to pay a bill, fine, fee or debt, or to help someone you have not met in person. Share the rule with family so everyone knows the answer before a call arrives.
- 02
Set a clear rule at work
Organisations can make it policy that unusual payment or gift card requests are confirmed through a separate, known channel, that payments need approval from two people, and that staff — especially in finance and management — are regularly briefed on this scam.
- 03
Inspect cards before you buy
Check that the protective stickers are intact and the PIN is not showing. If a card looks tampered with, choose another, show the damaged one to staff and consider another shop, because cards may be tampered with in batches.
- 04
Keep a record of every card
Photograph the card and the receipt whenever you buy a gift card. The card number and receipt help the issuer investigate if the card does not work or is used in a scam.
If you already acted
Protect access and contact the real provider.
- Contact the company that issued the gift card straight away, using the details on the card or its official website, and tell it the card was used in a scam.
- Ask whether any remaining balance can be frozen and whether a refund is possible; some issuers can help when the money has not yet been spent.
- Keep the card and the receipt, and photograph both; the issuer will need the card number and purchase details.
- Report the scam to your national fraud-reporting service — in the U.S., ReportFraud.ftc.gov — or to the police.
- If the request came at work, tell your manager and your IT or security team through a known channel so they can warn colleagues.
- Stop all contact with the scammer and do not buy more cards to ‘fix’ the problem, whatever new reason you are given.
Common questions
Short answers to real doubts.
Can I get my money back from a gift card scam?
Sometimes, but it is not guaranteed. Contact the company that issued the card immediately, explain that it was used in a scam and ask whether any remaining balance can be frozen and refunded. Have the card and receipt ready. Report it even if the scam happened some time ago, but the sooner you report, the better the chance of recovering anything.
Who to contact, by payment methodWhy do scammers ask for gift cards?
Because the number and PIN on the back are enough to spend the balance; the scammer never needs to hold the card. Once you load the card and share those details, the money is usually gone. That is why no genuine business or government agency asks to be paid this way.
My manager emailed asking me to buy gift cards for clients. What should I do?
Do not reply or buy anything yet. Check with your manager in person or on a phone number or email address you already know, and follow the normal purchasing process. Scammers impersonate managers by email, text and phone, and some avoid the words ‘gift card’, asking for ‘certificates’ instead. Report the message to your IT or security team.
If I keep the physical card, can the scammer still use it?
Yes. The number and PIN — read out on a call, typed into a message or visible in a photo — are all someone needs to spend the balance. Keep the card and receipt anyway: the issuer will need them when you report the scam.
Sources
Official guidance used for this article.
Stop & Verify summarises these sources for general education. Reporting routes and legal protections vary by location.