Blog/WhatsApp & mobile money

Payment Requests From "the Boss" on WhatsApp

"Hi, it's the MD. I'm in a meeting, can you handle an urgent payment?" How executive impersonation works on WhatsApp and the verification rule that stops it.

CyberWatch AI3 October 2026 · 2 min read
A manager on the phone in an office

A new number messages you with your managing director's photo: "Are you at your desk? I need you to handle something discreetly." Minutes later comes the request: pay a supplier today, or buy gift cards for a client, and keep it quiet for now.

Illustrative example · WhatsApp message from a new number
Hi, it's Daniel. I'm in back-to-back meetings with the board so can't talk. I need a payment of 8,400 made to a new supplier before 3pm. Details below. Please keep this confidential until the deal is announced.
Red flags: a new number, "can't talk", urgency, secrecy and a new payee.

How the scam works

  • Names, photos and roles come from the company website and professional profiles.
  • The timing often matches when the executive is travelling or at an event.
  • The request goes to someone who can make payments or buy gift cards.

The rule that stops it

No payment, gift card purchase or bank detail change is made because of a chat message alone. Confirm by calling the person on a number already in the company directory.

Make it easy to follow

  • Managers should say openly that they expect staff to check.
  • Require two people to approve new payees and urgent payments.
  • Publish the rule in team groups. See workplace WhatsApp rules.

Related: the boss gift card scam, whaling and business email compromise. For more, see our guide to WhatsApp scams.

Frequently asked questions

The message uses my manager's photo and name. How is that possible?

Photos and names are easy to find on company websites and professional profiles. Anyone can create a WhatsApp account with them.

What if my boss really does need something urgently?

A genuine manager will understand a quick call to confirm. Build that check into your team's process so nobody feels awkward.

Why gift cards?

They are hard to trace and can be used quickly. Real businesses rarely ask staff to buy gift cards by message.

Sources

  1. Avoiding and Reporting Gift Card Scams, US Federal Trade Commission
  2. Cybersecurity for Small Business, US Federal Trade Commission
  3. About suspicious messages and scams, WhatsApp Help Center
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.