⚠ EDUCATIONAL SIMULATION — Nothing on this site collects real data. You're safe here. ShieldWord.com
Scam #12 · High Threat

Your Boss Doesn't Need iTunes Gift Cards. Nobody's Boss Does.

Urgency. Secrecy. A specific dollar amount. And a request to photograph the codes. Every element is engineered to get you moving before you think.

What You Just Experienced

A text from your "CEO." He's stuck in a meeting. Needs client appreciation gifts. $1,200 in iTunes and Amazon cards. Buy them now, scratch the backs, photograph the codes, text the photos. Oh, and don't tell Karen in accounting — it's a surprise.

Every piece of that is a deliberate design choice. The authority figure creates compliance pressure. The specific amount and card types make the task feel concrete and legitimate. The time pressure ("before the 1pm meeting") prevents you from slowing down. And the secrecy request ("don't mention this to Karen") stops you from checking with the one person who would immediately flag it as wrong.

Why Gift Cards?

Gift cards are cash that fits in a text message. Once you send the codes, the scammer redeems or resells them within minutes. There's no chargeback. No reversal. No trace. Unlike a wire transfer that goes through a bank, or a credit card charge that can be disputed, gift card value evaporates the moment the code is entered.

That's why scammers love them. And it's why the ask is always "scratch off the back and send me a photo of the code" — not "give me the card when you see me." They need the codes digitally so they can drain them before you realize what happened.

The Tells

  • Gift cards as "payment" for anything. No business buys gift cards as client gifts through an employee's personal money via text. No hospital accepts gift cards. No IRS agent requests gift cards. No bail bondsman takes iTunes. This is a hard rule with zero exceptions.
  • "Scratch the back and photograph the codes." This is the sentence that should end the conversation. Anyone who needs the PIN photographed is draining the card remotely.
  • Urgency + secrecy. "Do it now" and "don't tell anyone" appearing together is the scam signature. Urgency stops you from thinking. Secrecy stops you from verifying.
  • The number doesn't match. Your real CEO emails from a known address. If they suddenly text from an unknown number, that alone should trigger verification.

The ShieldWord Defense

This scam — along with voice cloning and impersonation calls — is exactly why ShieldWord exists. A family code word stops it clean.

If anyone claiming to be family, a friend, or a colleague contacts you with an urgent request for gift cards or money: ask for the code word. No code word, no action. Call them back on the number you already have saved. Verify through a separate channel before spending a dollar.

How to Make This Stick

At work: "If you get an unusual request from a boss or colleague — especially involving money, gift cards, or wire transfers — verify through a different channel. Call them at their office number. Walk to their desk. Slack them. Do not just reply to the text."
At home: "We have a code word. If you get a call, text, or message from anyone in this family asking for money or gift cards urgently, ask for the code word first. Every time. Even if it sounds like me. Especially if it sounds like me."
For older family members: "If anyone ever tells you to go buy gift cards and read them the numbers — for any reason, from anyone — call me first. I don't care what time it is. Call me before you buy anything."
← Replay This Simulation All Scams