They pulled info from organizational website

I am on the board for a organization. Three days ago I got an email from the President of our organization asking if I was "free". When I looked at the email address it is not the one he uses. I replied and the scammers wanted me to buy apple gift cards as a "present" to the other board members, but to keep it secret because it was a "surprise".

Since the email address was not what he usually uses - I used his real email just to check this wasn't real - since we do actually give out gift cards.

After some back and forth with the scammers, I realized they were pulling all the info from our website- board member names, the main address of the organization ( told them I needed an address to bill the PO to). They then got suspicious and called me on what's ap- spoofing the President of the boards name. As soon as I answered they hung up and emailed me right back , asking me to hurry up and by the cards.

I pulled some of the fake apple gift cards listed in this reddit group and sent them. Haven't heard from them since :)