Singapore firm targeted in Microsoft Teams impersonation scam

The company discovered the fraudulent activity when employees received urgent messages purporting to come from the chairman, requesting immediate fund transfers. The scammers' use of the company's own communication infrastructure lent credibility to the deception, nearly convincing staff to process the unauthorized transaction.

Business email compromise scams have become increasingly sophisticated, with fraudsters targeting employees through familiar channels rather than external emails that trigger security warnings. By compromising or impersonating accounts on platforms like Microsoft Teams, attackers exploit the trust employees place in internal communications, making such schemes more difficult to detect than traditional phishing attempts.

The attempted fraud was halted before completion, but the incident underscores vulnerabilities in organizational security protocols. Experts recommend that companies implement additional verification procedures for high-value transactions, even when requests originate from internal platforms, and conduct regular security awareness training to help employees recognize social engineering tactics.

The case reflects a broader trend of scammers adapting their methods to exploit digital collaboration tools that have become essential to modern workplaces. Organizations across the region are increasingly urged to strengthen authentication measures and establish clear verification protocols for fund transfers, particularly those requested through chat-based communications.