Cybersecurity Alert: Scammers Impersonating CEOs Target Employees via LinkedIn and Email

Dubai - June 28, 2025

Dubai - A dangerous new cyber scam is spreading rapidly across the GCC and Asia, where fraudsters are impersonating top-level executives — especially CEOs and department heads — to trick employees into making online purchases, sending gift cards, or sharing confidential company data. This sophisticated social engineering attack uses publicly available information from platforms like LinkedIn and company websites to map out internal structures. Once scammers identify the leadership and team members, they launch targeted email attacks that appear trustworthy but are completely fake.

How the Scam Works

1. Reconnaissance

Scammers start by gathering data on the company’s CEO, senior managers, and team hierarchy using LinkedIn profiles and official websites.

2. Spoofed or Lookalike Emails

They then create a fake email address that looks almost identical to the executive’s, such as:

• ceo.name.office@gmail.com
   
• exec-name@outlook.com
   

These emails mimic the tone and style of internal communication.

3. Targeting Employees

The fraudster reaches out to junior or mid-level staff — often in HR, admin, or operations — pretending to assign a “confidential” and “urgent” task.

4. Psychological Manipulation

A typical email reads: “This is a confidential staff engagement. Please do not share this with anyone. I need your help buying digital gift vouchers or placing an urgent order. You will be fully reimbursed.”

5. Execution and Loss

The unsuspecting employee follows the instructions and shares the gift card details or order confirmation — believing it to be a genuine internal activity. The scammer disappears once the data is received.

Real-World Incidents

Such scams aren’t just theoretical — they’ve been reported globally and across the UAE:

• In 2023, a Dubai retail staff member purchased AED 5,000 worth of eGift cards under the impression it was a Diwali reward campaign initiated by their managing director. The email turned out to be fake.
   
• According to the FBI’s Internet Crime Complaint Center (IC3), Business Email Compromise (BEC) scams caused over $2.7 billion in losses globally in 2022.
   
• A Barracuda Networks report reveals:
   
  • 1 in every 10 spear-phishing emails impersonates a senior executive
     
  • These scams spike during holidays or internal celebration periods
     

Why Employees Fall for It

This scam works not through technology, but through trust and authority. Common reasons include:

• Fear of questioning or ignoring senior management
   
• The email uses urgency and confidentiality to pressure the employee
   
• The tone sounds professional and believable
   
• In cultures where leadership is deeply respected (like the Gulf and South Asia), employees hesitate to challenge such requests
   

How to Protect Your Organization

For Employees:

• Verify any unusual requests by calling or messaging your manager directly
   
• Check the sender’s full email address — avoid responding to free domains like Gmail/Yahoo for corporate tasks
   
• Never make payments or buy gift cards without formal written approval
   
• Report suspicious emails to your IT or security team immediately
   

For Employers:

• Conduct regular cybersecurity training for all staff
   
• Add warning banners on external emails
   
• Limit public access to your team structure and internal designations
   
• Use multi-level approval processes for any kind of financial transaction
   
• Encourage a culture of verification — it’s okay to double-check with a superior
   

Expert Opinion

“The era of cybercrime is no longer about breaking firewalls. It’s about tricking people,” says Ravi Makhija, cybersecurity advisor and CEO of InfoSecure Middle East. “No one is too small or too senior to be targeted. Awareness is the strongest firewall.”

From the Desk of Dr. Amrinder Pal Singh, CEO – DXB News Network

“At DXB News Network, we are proud to lead the way in progress and awareness. We wrote this article based on a real-life incident in our team. One of our employees received a suspicious email asking him to purchase vouchers, supposedly from me. As he prepared to respond, he saw me in the office nearby — and immediately realized something was wrong. He showed me the message, and that’s when I decided we must warn the world about this scam.
It’s our duty as media professionals and responsible citizens of the UAE to protect people — and we will continue to do so. If any reader has seen similar cases or wants to share their story, please write to us at:  editor@dxbnewsnetwork.com, Let’s work together to keep our workplaces and communities safe.”

This scam is a wake-up call for companies in today’s digital-first world. When your organizational hierarchy is available online, cybercriminals will exploit it. But by staying informed, cautious, and connected — we can outsmart them.