PanicStation.org
UK USA
uk Work & employment crises fake boss scam • ceo fraud email • urgent gift card request • asked to buy gift cards • work payment scam • payroll payment request • finance transfer request • invoice scam at work • whatsapp boss message • sms from manager scam • email impersonation work • business email compromise • changed bank details email • gift card codes request • “can you do me a favour” email • urgent confidential request • new starter boss scam • suspicious work email • payment authorization scam

What to do if…
you receive an urgent message asking you to buy gift cards or make a payment for work

Short answer

Pause and do not pay or buy gift cards. Verify the request using a known, separate contact method, then report it internally as a suspected scam.

Do not do these things

  • Don’t buy gift cards “just to get it done”, even if you think you’ll be reimbursed later.
  • Don’t share gift card codes, photos of the back, screenshots, or receipts to anyone who asked.
  • Don’t click “invoice”, “payment link”, “share file”, or “confirm bank details” links from the message.
  • Don’t reply to the suspicious email/text to “check if it’s really you” — that keeps you in the scammer’s channel.
  • Don’t feel pressured by secrecy (“confidential”, “don’t tell finance”) or urgency (“in the next 10 minutes”).
  • Don’t delete the message yet (you may need it for IT/security and reporting).

What to do now

  1. Stop the transaction mid-stream. If you’re already at a till or checkout, stop and step aside. If you’ve opened a banking screen, close it and do nothing further.
  2. Verify using a trusted channel you choose (not the message).
    • Call your manager/colleague on a number you already have (or from the company directory), or speak to them in person.
    • If you can’t reach them quickly, treat it as a “no” until verified.
  3. Report it inside your workplace immediately.
    • Forward the email (or screenshot the text/Teams/WhatsApp message) to your IT/security team or helpdesk.
    • Tell your finance/accounts payable contact so they can watch for linked fraud attempts (for example, vendor bank-detail changes, fake invoices, payroll diversion).
  4. If it came by email, report it as phishing (UK). Forward the suspicious email to report@phishing.gov.uk.
  5. If it came by text message (SMS), report it (UK). Forward the SMS to 7726 (free) to report it to your mobile provider.
  6. If you already paid or started a payment, act fast (don’t be embarrassed).
    • Contact your bank or payment provider immediately and ask them to try to stop, recall, or reverse the payment if possible. Write down the time you called and any reference/case number they give you.
    • If gift cards are involved: contact the gift card issuer/brand immediately and ask what they can do to freeze/stop use of any remaining balance. Keep the physical cards and receipts.
    • Tell your employer’s finance team immediately so they can check whether others are being targeted.
  7. Make an official report if money was lost (UK).
    • If you’re in England, Wales or Northern Ireland, report fraud/cyber crime to Report Fraud (online).
    • If you’re in Scotland, report fraud to Police Scotland via 101.
  8. Make a quick record while it’s fresh. Save the message, note the time/date, the sender details, any requested amounts, and any payment details given. This helps internal investigation and reporting.

What can wait

  • You do not need to decide today whether to confront anyone, “prove” it was a scam, or handle disciplinary/policy issues.
  • You do not need to do a full device “clean” right now unless your IT/security team tells you to.
  • You do not need to write a perfect report — basic facts are enough to start.

Important reassurance

These scams are designed to trigger helpfulness, urgency, and fear of “letting work down”. Getting a believable message does not mean you were careless — the safest response is to slow the situation down and verify.

Scope note

These are first steps to prevent immediate loss and contain workplace risk. Later steps (internal incident handling, password resets, training, formal reporting) can be done once you’re calm and supported by your organisation.

Important note

This guide provides general information and first-step actions, not legal, financial, or professional advice. Processes and available remedies can vary by bank/payment provider, card issuer, employer policies, and the details of the scam.

Additional Resources
Support us