New Gift Card Scam Claims Funds are for Essential Workers

Summary

The NJCCIC is aware of a new phishing campaign in which threat actors are impersonating known individuals, likely using display name and/or email address spoofing, and requesting recipients to purchase gift cards for essential workers. The sender asks for the codes on the back of the gift cards after purchase in order to distribute the funds. In an email shared with the NJCCIC, the sender impersonated the town’s mayor with a subject line of “FOR OUR ESTEEMED STAFFS:” and requested seven $100 gift cards. While recipients may ordinarily be suspicious of an email containing grammatical errors and requesting the purchase of gift cards, referencing the recipient by name and claiming the request is for essential workers during the COVID-19 pandemic may make these emails appear more genuine.

Recommendations

The NJCCIC reminds users to never purchase gift cards and send the codes to someone without verifying the request first via a separate means of communication. This is an unusual request and should be handled with increased suspicion.