Zhao, a woman living in Beijing, reported losing over $100,000 in May to a romance scammer who claimed to be a researcher for Microsoft. After initially communicating on the Chinese social media platform Xiaohongshu, the scammer requested to move their conversation to Microsoft Teams, providing her with an account and password. Zhao stated, "I didn’t think much because I had used this app before. And since it was developed by Microsoft, I kind of trusted it." Once on Teams, the scammer promised to build a future with Zhao and introduced her to a cryptocurrency investment project, claiming it would yield quicker profits than stock trading. Zhao became excited and took out loans to invest more money. Eventually, the scammer disappeared with her funds, and she lost access to the Teams account, preventing her from sharing chat logs with authorities.
After discussing her experience on social media, Zhao learned of dozens of other victims in China who had experienced similar scams, with reported losses ranging from $1,500 to $300,000. Only one victim reported recovering some funds by locating the scammer's bank account. The victims described a common pattern where they were instructed to download Microsoft Teams and log in using credentials provided by the scammers. Some local law enforcement agencies in China have issued warnings about Teams being used for scams, with one bureau labeling it a "fraud-related app." Maimai, a Chinese platform similar to LinkedIn, indicated that it would warn users about scams if it detected high-risk keywords like "Teams" and "Skype."
For years, victims have left negative reviews of Microsoft Teams on Chinese app stores, with 30 percent of 500 reviews analyzed by WIRED mentioning scams. One review from January stated, "The scammers had me register for this app so they could contact me, and they defrauded me of RMB 1.48 million [$220,000]. The police have opened a case." Microsoft acknowledged that scammers exploit trusted brands and platforms for social engineering schemes, stating they investigate reports of abuse and strengthen protections against fraud. In June, Microsoft began displaying a warning banner to Teams users in China about common scams and has since discontinued the personal version of Teams in the country, making it available only through enterprise accounts.
Reports of similar scams using other corporate software, including Webex and Zoho's Cliq, have also emerged. According to WIRED's analysis, 71 percent of over 150 reviews of Webex on Apple's Chinese app store referenced scams. Zoho confirmed a limited number of instances of scammers using Cliq and has taken steps to disable online payments and suspend accounts linked to suspected scammers.
Victims have reported that scammers target individuals through various means, including posing as job recruiters, prospective renters, or potential dates. The scammers utilize Teams' enterprise features to create accounts for victims and provide them with login credentials, allowing them to control the accounts and erase chat histories once the scam is complete. Zhao discovered that some victims had encountered the same scammer she had, and she attempted to gather more information by posing as a potential victim during a conversation with the scammer.
Zhao noted that when she was defrauded in May, Microsoft Teams did not alert her to the potential dangers of her conversation. It was only when she spoke with the scammer again in August that a warning banner appeared, advising users not to share confidential information with unknown individuals. Microsoft Teams is seen as an appealing platform for fraudsters in China due to its lack of government restrictions, advanced features, and association with a reputable multinational company. In contrast, Chinese messaging apps have implemented measures to flag potential scams, indicating that Western platforms may be less prepared to address such issues.