There has been a growing concern for Microsoft Teams being used as a tool for caller ID spoofing scams. Attackers are now disguising themselves as trusted co-workers by manipulating how their name appears when calling through Teams.
What is Caller ID Spoofing?
VUMC Enterprise Cybersecurity (VEC) has come across incidents where users received calls that initially appeared to come from their direct supervisor. However, after answering, the display number and/or name changed to show an unfamiliar number. By impersonating trusted contacts, they increase the likelihood that the recipient will answer the call and comply with malicious instructions.
Common Characteristics of the Scam:
- Fake Teams Calls from “Trusted” Contacts
The call appears to be from a colleague or supervisor, but the actual source is an external scammer using spoofing tactics.
- Identity Change During the Call
After the call connects, the display name might change or reveal a suspicious phone number. This is often the clearest sign that something is wrong.
- Request for Urgent Actions
Scammers may push for immediate action such as installing software, accessing files, or sending payments, claiming it’s a time-sensitive issue or emergency.
How to Stay Safe
- Don’t rely on caller display name or number alone. If something feels odd, verify the caller through a separate channel like email or reach out to the individual through a Microsoft Teams message
- Avoid downloading software or clicking links if provided during the unsolicited call or chat.
- Do not disclose personal or financial information over the phone
It’s important for you to report anything suspicious. If you suspect a caller ID spoofing scam, end the conversation immediately and notify the VUMC Help Desk at 615-343-HELP (4357).
