What to watch for before joining your next virtual meeting: Scambusters #1,203
Online meetings have become a normal part of daily life for work, school, healthcare, and even family gatherings. Unfortunately, scammers know this, too. By sending fake meeting invitations, impersonating trusted organizations, or embedding malicious links, criminals are turning familiar video platforms into powerful tools for fraud.
Understanding how these scams work and how to spot them can help you avoid becoming the next victim before a simple meeting turns into a serious security issue.
Behind the Screen: How Scammers Exploit Virtual Meetings
Virtual meetings are now a common part of our daily lives. We connect with colleagues on Microsoft Teams, attend webinars on Zoom, and interview for jobs on Google Meet. Video conferencing is everywhere. However, as more people use these platforms, cybercriminals are becoming more interested in targeting them.
Scammers are quick to change their tactics. Right now, many people are using virtual meeting rooms, which can make scams feel more real and personal. This can cause victims to let their guard down. To protect your personal information and money, it’s important to understand how these scams work.
This article explains how meeting platform scams work, the warning signs to look for, and what to do if you think something is wrong.
What Are Meeting Platforms?
Meeting platforms are software tools that let people communicate through video and audio online. They help users work together in real time, share screens, and transfer files. While Skype was one of the first options available, today, popular choices include Zoom, Microsoft Teams, Google Meet, Cisco Webex, and GoToMeeting.
These tools are easy to use. You often just need to click a link to join a session. However, this simplicity is what scammers take advantage of.
What Types of Scams Occur on Meeting Platforms?
Criminals use these platforms for different types of fraud. The most common categories include:
- Phishing Attacks – Sending fake meeting invitations that install malware or steal login credentials.
- Employment Fraud – Conducting fake job interviews to steal Social Security numbers or banking information.
- Tech Support Scams – Impersonating IT support to gain remote access to a computer.
- Investment Fraud – Hosting "exclusive" webinars to pitch fake cryptocurrency or stock opportunities.
- Deepfake Impersonation – Using AI to mimic the voice or face of a CEO or executive to authorize fraudulent wire transfers.
The Rise of Meeting Platform Scams
Online meeting platforms are increasingly being used to scam people. While internet scams have been around for a long time, this specific type grew rapidly in 2020.
When the COVID-19 pandemic led to remote work, millions of new users started using platforms like Zoom. Many of them didn’t know about the security settings or how to stay safe. Scammers took advantage of this confusion right away. Early problems included "Zoombombing," where intruders would disrupt meetings with inappropriate content. However, the tactics quickly changed from simple disruptions to more advanced methods of stealing money and gathering personal information.
How Criminals Exploit These Platforms
Legitimate platforms like Zoom and Teams are not trying to scam you. Instead, criminals are misusing these platforms to carry out scams. Here’s how they work:
- Malicious Links – A scammer sends an email that looks like a real meeting invite. The subject may say "Missed Meeting: Urgent" or "Performance Review." When the victim clicks the "Join Meeting" button, the app doesn’t open. Instead, it either downloads malware or takes them to a fake login page that steals their passwords.
- The "Deepfake" Executive – Scammers can use AI tools to place a fake face over their own during video calls. They may pretend to be a high-ranking executive in a company and ask a finance employee to transfer funds right away for a "confidential acquisition." Because the employee sees and hears what they believe is their boss, they may skip normal security checks.
- Recording for Blackmail – In romance scams or "sextortion" cases, scammers often shift conversations from dating apps to video calls. They persuade the victim to perform compromising acts on camera, record the session, and then demand payment. If the victim does not pay, the criminal threatens to send the recording to the victim's friends and family.
Safety Measures and Vulnerability Issues
Many major platforms have put strong safety measures in place to address these issues. These measures now include:
- Waiting Rooms – Hosts must approve guests before they can enter.
- Password Protection – Meetings require a unique passcode.
- End-to-End Encryption – Prevents third parties from intercepting the data stream.
- Screen Sharing Locks – Only hosts can share screens unless permission is granted.
Safety issues still exist, mainly because of user mistakes. If a user shares a meeting link publicly on social media, anyone can join the meeting. Additionally, if a user doesn't update their software, they risk security problems that have already been fixed in newer versions.
A Real-World Example – The Fake Job Interview
Employment scams are currently one of the most harmful types of fraud. Here is a step-by-step explanation of how this scam happens.
Step 1. The Solicitation – A recruiter contacts you through LinkedIn or email. They say they represent a well-known company and that your resume stands out. The job pays slightly more than average and offers full remote work.
Step 2. The "Screening" – The recruiter will invite you to an interview on a platform like Microsoft Teams or Zoom. They might say their camera is broken, or they may ask to do the interview only through the chat function in the app.
Step 3. The Immediate Offer – The interview is easy. They ask basic questions and do not require detailed answers. Within an hour after the call ends, you get an official job offer letter.
Step 4. The Theft – This is the main point. To get you started, they ask for sensitive information right away.
- Bank details – This is for setting up direct deposit.
- SSN/ID – For "tax purposes."
- Check fraud – They send you a fake digital check to buy "home office equipment" from a specific vendor. By the time your bank discovers the check is fake, you have already sent your own real money to the "vendor," who is actually the scammer.
Educational Resources
To see these scams in action and learn how to prevent them, search for these titles on YouTube. You will find visual examples and news reports.
Red Flags – Identifying a Scammer in the Meeting
You can usually spot a malicious actor by looking for certain behaviors and technical signs.
- Camera Refusal – The person will not turn on their camera, saying they have technical problems, but they want you to keep yours on.
- Generic Email Domains – The meeting invite comes from a regular email address like Gmail, Yahoo, or Outlook instead of using a corporate email address (e.g., @companyname.com).
- Urgency – The person tries to pressure you into making a quick decision, clicking a link, or transferring money while you are on the call.
- Unprofessional Chat – The "recruiter" or "support agent" uses bad grammar, makes spelling mistakes, or uses too casual language in the meeting chat box. A link in the chat takes you to a website that looks slightly off (for example, micros0ft-support.com instead of microsoft.com).
- Requests for Remote Access – If someone asks you to download software like AnyDesk or TeamViewer to "fix" a problem or "set up" your computer, be cautious.
What To Do if You Suspect a Scammer
If you feel something is wrong during an online meeting, act right away.
- End the Call – Do not be polite. Hang up immediately.
- Do Not Click – If they posted links in the chat, do not click them.
- Disconnect from the Internet – If you allowed them remote access or clicked a suspicious link, disconnect your device from Wi-Fi/Ethernet to stop data transfer.
- Scan for Malware – Run a full antivirus scan on your computer.
- Change Passwords – Update your passwords for email and banking from a different, secure device.
Resources and Reporting
If you see a scammer on a meeting platform, report them. This helps protect others from becoming victims.
- The Platform – Use the "Report User" function built into Zoom, Teams, or Google Meet.
- IC3 – File a complaint with the FBI’s Internet Crime Complaint Center.
- FTC – Report fraud to the Federal Trade Commission.
- Your Bank – If you shared financial information, contact your bank's fraud department immediately.
Summary
Meeting platforms have changed how we work, but they also bring new risks from scammers. They may use fake job interviews, phishing links that look like invites, or convincing deepfakes. These scams usually depend on tricking people instead of hacking.
To stay safe, look for warning signs like generic email addresses, people who refuse to turn on their cameras, and urgent requests for money. Be cautious, check who you are talking to, and never give remote access to someone you don’t know.
Remember, Stay Alert and Stay Informed!