How to spot scam texts and phone calls at work

Scammers know email filters catch a lot, so they go around them with texts and phone calls. They pretend to be your boss, IT, a vendor or a delivery company, and they count on you being busy enough to act without checking.

Scam texts (smishing)

Common examples:

• “Hi, it’s [your CEO’s name]. I’m in a meeting, can you do me a quick favor?” (It usually ends in gift cards.)
• “Your Microsoft 365 password expires today. Sign in here to keep your account.”
• “We couldn’t deliver your package. Update your address at this link.”
• “Your bank account has been locked. Reply with the code we just sent you.”

Scam phone calls (vishing)

Common examples:

• Someone says they’re from IT or Microsoft and needs you to install a program or read them a code.
• A vendor calls to say their bank details changed and future payments should go to a new account.
• An urgent call from “the bank,” “the IRS” or “law enforcement” demanding payment right now.
• A voice that sounds like your boss asking for something unusual. Voice-cloning tools can make this convincing.

The warning signs

• Urgency or secrecy. “Right now,” “before end of day,” “don’t tell anyone.”
• Money or codes. Gift cards, wire transfers, changed bank details, or a sign-in code sent to your phone.
• A request to install something or give remote access.
• A link to sign in. Real IT won’t text you a link to “verify” your account.
• An unknown number claiming to be someone you know.

What to do instead

1. Don’t reply, click, or call back the number they gave you.
2. Verify another way. Call the person or company at a number you already have, or walk over and ask.
3. Never share a sign-in code sent to your phone. Not with IT, not with anyone. A real IT person will never ask for one.
4. Tell IT. A screenshot of a scam text helps them warn your coworkers.
5. Block and delete the message once you’ve reported it.

Already replied, clicked, or gave out information? Call IT right away. See What to do if you clicked a phishing link.

Matter of Technology clients: got a suspicious text or call? Call (844) 628-8371 before you act on it.