A friend fell for a scammer who impersonated her CEO (with a firstname.lastname@fakedomain… email) and asked her to go around the city buying Apple and Google gift cards then send photos of the codes.
To her credit, she did attempt to verify the request in person: "So you want me to send you the photos now?" Unfortunately, the CEO thought she meant group photos (that day also happened to be the last day of someone else in the office, so they were preparing a scrapbook) and said yes…
USD 2100 gone in a day and all non-reimbursable because, as far as any of the involved parties is concerned (7-11, credit card companies, banks) she bought the cards in person with her own cards, so it wasn't fraud on their side. And apparently Apple couldn't help because she didn't buy directly through them and the codes had already been revealed.