Scammers Exploit Microsoft Teams and Webex for Fraud
Fraudsters based in China are weaponizing legitimate enterprise communication platforms like Microsoft Teams and Cisco Webex to conduct romance and investment scams, exploiting the perceived trustworthiness of well-known business tools to deceive victims. The core issue is a lack of user awareness — victims fail to recognize social engineering tactics even when delivered through professional-grade software. Compounding the problem, scammers instruct victims to use specific controlled accounts, deliberately obstructing the preservation of chat logs and hampering law enforcement investigations. This matters because it demonstrates that platform legitimacy does not equal communication safety, and that the absence of adequate logging and reporting mechanisms enables criminals to operate with near impunity.
Tactical Insight
Immediate actions
- Train employees and users to verify the identity of any contact initiating unsolicited financial conversations on collaboration platforms.
- Report suspicious accounts directly to platform providers (Microsoft, Cisco) using in-app reporting tools and escalate to local authorities immediately.
Long-term improvements
- Establish organizational policies requiring that all financial transactions be verified through a secondary, out-of-band communication channel before execution.
- Advocate for platform providers to implement stronger identity verification and fraud detection mechanisms for enterprise communication tools.
- Educate staff regularly on evolving social engineering tactics including romance scams and fake investment schemes using real-world case examples.
Detection & Logging measures
- Enable and retain full audit logs of communications on enterprise collaboration platforms to support forensic investigation if fraud occurs.
- Implement monitoring rules or DLP policies that flag unusual financial language or external account-sharing patterns within collaboration tools.