Consumer Handbook: Don't Click On Phony Office Emails With Fake Voicemail Messages

Jun 13, 2019


A new phishing email with fake voicemail messages is so convincing, it almost fooled BBB staff!

This message looks just like an alert for a new voicemail message. But as always, it's really a way to trick you into giving up personal information or downloading malware onto your computer.

Here’s how this scam works. You receive an unsolicited email that says you have a new voicemail from your Office 365 account or another workplace software. The email seems legitimate: it is complete with the official software logo and text claiming that the message comes from a "trusted source." In some versions, a portion of the "voicemail" is transcribed in the email. It says something like, "Please contact me ASAP about..." Scammers hope this will make you curious enough to click on the link to the fake message they've attached to the email. However, instead of redirecting you to a voicemail, the link downloads malware onto your computer. In other cases, it redirects you to a fake form that will ask you for information such as your password.

How do you protect yourself from a phishing scam? Be cautious of unsolicited emails. If you've never opted into receiving email alerts from a company or software product, be wary of them. Never click on links in emails from strangers. If you don't know who the email came from, don't click on the links in their message. Even links that seem harmless can download malware onto your computer.

Log into professional accounts directly instead of via email. If you aren't sure if a message you receive is real, log in directly to your account to check, instead of clicking on links in an email. If you've been the victim of a phishing scam, use your experience to help others avoid falling prey by reporting it to BBB’s Scam Tracker.