How skeptical are you when you get an email, purporting to be from your boss, asking you to buy gift cards for the staff? How do you weigh the subtle red flags contained in that email versus wanting to just do your job?