Gift cards and shipping alerts might seem like holiday conveniences, but they’re some of the most exploited tools for scammers this time of year.
Just ask one small business owner who bought $500 in gift cards after getting what looked like a request from their CEO.
It was a spoofed email—and the cards were long gone before they realized.
Or the parent who got a “FedEx delivery failure” text for their kid’s holiday toy, clicked the link, and ended up with malware on their phone.
Why It Matters
- Gift cards are untraceable, easy to resell, and a favorite among scammers.
- Delivery notifications can be spoofed to steal personal info or install malware.
- Social engineering is most effective when we’re busy, distracted, or in a hurry—like the holidays.
What You Can Do
- Never buy gift cards based on email or text requests without verifying by phone or IN PERSON.
- Watch out for delivery texts that ask for logins or payment info—legit carriers don’t do that.
- Use multi-factor authentication and antivirus on all devices.
- Train staff to verify gift card and delivery requests, especially if your business runs holiday promos.
Bonus Tip for Office Managers: If your business offers gift cards or promotions, make sure proper controls are in place.
Require in-person or voice confirmation for large or urgent requests, and monitor usage closely.
