An employee receives an email from the CEO directing them to immediately purchase gift cards using their personal credit card. The email convincingly describes an urgent need to have this done immediately, to bypass typical protocols, and that the company will reimburse the employee. Further, the employee is directed to reply to the email with the gift card security codes to the CEO for safekeeping immediately upon purchase.