Email · stamped FAKE BOSS

The boss who needs gift cardsFAKE BOSS

A real scam people fell for this year, next to the real thing. The numbers mark the three things to check: hover or tap one to see what it tells you.

Safe
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
Q3 client list
MMichael Chen <michael.chen@examplelaw.ca>to me10:42 AM

Hi, can you send me the Q3 client list before the 2pm meeting?

The one in the shared drive is fine. Thanks!

Michael

ScamFAKE BOSS
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
Quick favour
MMichael Chen (CEO) <michael.chen.office@gmail.com>to me10:42 AM

Hi, are you at your desk? I need a quick favour and I'm stuck in meetings all day.

I need you to pick up 5 Apple gift cards, $200 each, for a client appreciation. Scratch the backs and send me photos of the codes. I'll reimburse you this afternoon.

Please keep this between us for now, it's a surprise.

Always check the sender.

Your boss's name on a free Gmail account, asking for gift cards and secrecy. Real bosses write from their work address and never pay clients in gift card codes.

Always checkThe real oneThe scam
1Where it livesCheck firstIs it the real company's or person's own address or number?

michael.chen@examplelaw.ca is his work address.

michael.chen.office@gmail.com is a free Gmail account anyone could make.

2What it asks you to doDoes it want a password, a payment, a call, or a tap?

Send the Q3 client list from the shared drive.

Buy $1,000 in Apple gift cards and send photos of the codes.

3How hard it pushesIs there a deadline, a threat, or a surprise charge?

Before a 2pm meeting, nothing more.

“Stuck in meetings”, “keep this between us”, paid back later.

RememberGift cards for your boss? Walk over or call them on the number you already have. It's almost always a scam.

Would you have spotted it?

10 pairs like this one, three minutes, a score to share. Then find out who in the family is the easy mark.

Take the testNext scam: The PayPal account email →