Gift Card Scams: How They Work and How to Protect Staff

Gift card scams are frauds where scammers pressure someone into buying gift cards and sharing the card numbers and PINs, then spend the balance fast. The most common versions are fake boss emails and texts aimed at employees, government impostor calls aimed at older adults, and tampered cards sold off retail racks. Scammers prefer gift cards because payments are fast, hard to trace and hard to reverse. No legitimate company or government agency asks for payment in gift cards. The best defense is to pause and verify any unexpected request through a separate, known channel.

The people who fall for this usually aren’t careless. They’re helpful. A new hire gets a text from the “CEO” and wants to make a good impression. A retiree gets a call from “the government” and panics. Scammers aim at that exact weak spot, and a ten-second phone call protects your business better than any spam filter.

What Gift Card Scams Are and Why Criminals Prefer Them

A gift card scam is any scheme where the criminal’s goal is the card number and PIN, because those codes are all anyone needs to spend the balance.

The scale is bigger than most people assume. The FTC’s 2024 Consumer Sentinel Data Book shows 41,120 fraud reports named gift or reload cards as the payment method, with $212 million in reported losses.

And that’s only what people reported. Complaint data relies on victims coming forward, so it undercounts the real damage. Once the codes are gone, the money is gone, and there’s rarely a way to claw it back.

The mechanics are almost boringly simple.

How Gift Card Scams Work in Five Steps

Gift card scams follow a predictable process: a trusted identity, an urgent story, a purchase, a request for the codes, and a drained balance.

Five-step pattern of gift card scams: contact, pressure, purchase, codes and loss

Every version follows this script, so spotting any one step early is enough to stop the scam before the codes leave your hands.

The pattern runs like this:

  1. Contact. A text, email or call arrives from someone posing as a boss, coworker, agency or company.
  2. Pressure. The story is urgent and often secret. A client gift, an overdue fine, a “quick favor.”
  3. Purchase. You’re told to buy specific gift cards, often several, from a nearby store.
  4. Codes. You’re asked to scratch off the back and send the numbers and PINs, or a photo of them.
  5. Loss. The scammer redeems the cards, and the promised repayment never shows up.

Here’s how it looks in real life. One victim, according to a BBB scam alert on fake boss texts, lost over $1,000 after a fake boss asked for five $200 Vanilla Visa cards as a “secret staff reward” and promised repayment by the end of the day.

Look at every lever in that one message. Authority. Secrecy. A deadline. And a promise that makes the whole thing feel risk-free.

Three Gift Card Scams Hitting Businesses and Families

The three most common gift card scams are boss impersonation aimed at employees, government impersonation aimed at older adults, and tampering with cards on retail shelves.

Boss and CEO Impersonation Emails

Boss impersonation scams use a fake email or text from an executive asking an employee to buy gift cards for a client, a staff reward, or an urgent favor.

These scams belong to the business email compromise family. The FBI’s 2025 Internet Crime Report recorded about $3.05 billion in BEC losses in 2025, up from $2.77 billion in 2024, making it the second-costliest crime type. Gift card requests sit at the small end of that pile, which is why people let them slide.

Scammers often message new hires and interns, who want to help and are least likely to question a senior name. Our article on why attackers target employees with limited access explains the logic. For the full defense plan, see our guide to business email compromise prevention.

Government and Law Enforcement Impostors

Government impostor scams use calls or messages from fake police, tax or benefits officials who demand gift card payment to settle a supposed debt or fine.

Older adults take the hardest hit. The FTC’s report on older adults and fraud found that in 2024, gift cards were the top payment method for people 60 and over in government impersonation, tech support, romance and family impersonation scams.

Fear does the work here. Nobody thinks clearly when a “police officer” says a warrant is coming.

Tampered Gift Cards at Retail Stores

Gift card tampering is a retail scam where criminals steal the codes from cards on store racks, reseal the packaging, and drain the balance after a shopper loads it.

This runs at scale. Homeland Security Investigations’ guidance on retail gift card fraud says Chinese organized crime groups use “checkers” who run balance inquiries until a tampered card is bought and loaded. Then they drain it.

It isn’t only a U.S. problem. NSW Police allege a 32-year-old Australian man handled 61 Apple and iTunes cards worth more than $10,000 for a criminal syndicate. He was convicted in July 2026 and given a 15-month suspended sentence.

The victims in these cases never spoke to a scammer. They just bought a gift.

Why People Fall for Gift Card Scams: Trust, Fear and Helpfulness

Gift card scams succeed through emotional manipulation, using trust in authority, fear of consequences, and the desire to help to rush people past their own judgment.

Lazy security training gets this part wrong. It treats victims like they missed an obvious trick. They didn’t. They responded the way a good employee or a good citizen is supposed to respond.

Trust makes the fake boss believable. Fear makes the fake officer urgent. And helpfulness turns a strange request into “part of the job.”

Scammers also do homework, pulling names and titles from public profiles and your website. Our piece on how cybercriminals research your organization online shows how easy that is. The broader playbook is covered in preventing social engineering attacks.

The fix is to take emotion out of the decision with a rule nobody has to think about.

Red Flags That Signal a Gift Card Scam

The clearest red flags in a gift card scam are urgency, secrecy, an unusual request or channel, and any instruction to pay with gift cards or share card codes.

Watch for these warning signs:

  • A tight deadline: “I need these in the next hour.”
  • Secrecy: “Keep this between us, it’s a surprise.”
  • A new number, a personal email address, or a reason the person “can’t talk right now.”
  • Any request to pay a bill, fine or invoice with gift cards.
  • A request to send card numbers, PINs, or a photo of the back of the card.
  • A promise to pay you back later.

One flag is enough to stop. Two or more, and you’re looking at a scam.

How to Protect Yourself and Your Employees

Protecting employees from gift card scams comes down to a verification rule, a standard gifting procedure, and regular training that makes both habits automatic.

Put these in place this month:

  • Verify every unexpected request directly. Call the person on a number you already have. Never reply to the message itself.
  • Write a gifting procedure. Decide who can buy gift cards, how purchases get approved, and that codes are never sent by text or email.
  • Have leaders say it out loud. “I will never ask you to buy gift cards.” Staff need to hear it from the top.
  • Train with real examples. Our phishing training guide for employees walks through how to build a program.
  • Make reporting easy. Thank people who flag a suspicious message, even when it turns out to be legitimate.

The same habit protects much bigger money. The APWG’s Q2 2026 phishing trends report notes that wire-transfer BEC attacks seen by Fortra rose 88% from Q1, with an average requested amount of $61,732. An employee who learns to verify a $200 gift card request is practicing the exact move that stops a $60,000 wire.

How to Spot a Tampered Gift Card in Stores

Shoppers can catch many tampered gift cards by inspecting the packaging before purchase and checking balances only through the card issuer’s official website or phone number.

Five checks shoppers can use to catch a tampered retail gift card, from packaging to official balance checks

Organized crime groups drain tampered cards right after shoppers load them, so a quick inspection at the rack protects you and the recipient.

Before you buy:

  • Check for torn, loose or resealed packaging.
  • Look at the PIN area for scratches, stickers or any sign it’s been exposed.
  • Buy online directly from the card issuer when you can.
  • Keep your receipt until the card is fully used.
  • Check the balance soon after buying, using only the issuer’s official site or number.

This matters beyond your own wallet. HSI’s Project Red Hook targets Chinese organized crime groups that launder money through gift cards, and HSI puts the losses “in the hundreds of millions of dollars.” A drained card at the grocery store is one small deposit into that machine. If your business buys cards for staff or clients, add these checks to your gifting procedure.

What to Do If You’ve Been Scammed With Gift Cards

Victims of a gift card scam should contact the card issuer immediately and report the fraud, because speed gives the issuer the best chance to help.

3 million fraud reports were filed with the FTC in 2025, up from 2.6 million in 2024

If you’ve been scammed, you’re far from alone. Reporting at ReportFraud.ftc.gov is how these cases get counted at all.

  1. Stop sending money or codes, even if the scammer promises a refund.
  2. Call the card issuer using the number on its official website. Share the card numbers and receipts, and ask whether a refund is possible.
  3. Tell the retailer where you bought the cards.
  4. Report it to the FTC at ReportFraud.ftc.gov.
  5. At work, tell your manager and IT right away so they can warn everyone else.

Don’t let embarrassment slow you down. Consumers filed 3 million fraud reports with the FTC in 2025, up from 2.6 million in 2024. You’re in very large company, and reporting is how these cases get counted at all.

Gift Card Scams: Quick Answers

What are the latest gift card scams?

The latest gift card scams include fake boss texts, fake balance-check websites, and large laundering operations that turn stolen card value into Apple devices. In one 2025 case, a warehouse in Amherst, New Hampshire received more than 31,000 Apple devices worth nearly $35 million over 11 weeks, all paid for with gift cards. A DHS warrant says those cards came from romance scams, account hacks and sextortion.

How do you know if your gift card has been scammed?

A gift card has likely been compromised if it shows a zero or lower-than-expected balance soon after purchase, or if the packaging looked disturbed. Contact the issuer right away with your receipt.

Can someone steal your info from a gift card?

Criminals can steal a gift card’s number and PIN, either by tampering with it in the store or by tricking you into entering it online. BBB Scam Tracker reports on fake balance-check sites show some collect the card number and PIN, then drain the card. Never type your codes into a third-party balance checker.

Secure Today, Safe Tomorrow: Start With One Rule

The simplest defense against gift card scams is one written rule: no one buys gift cards or shares codes on request without verifying by phone first.

Do this today. Send your team a two-line message saying leadership will never ask for gift cards by text or email, and any such request gets a phone call to verify. At next week’s team meeting, ask whether everyone would know what to do if that text arrived. If anyone hesitates, you’ve found your training gap.

For SMBs and nonprofits that want a wider view, RiskAware’s free cybersecurity score is a quick way to see where your other cyber risks sit. Start there, and close the gaps before a scammer finds them.

Share the Post: