Mumbai: The classic WhatsApp display picture scam, where fraudsters impersonate corporate leaders to trick employees into making unauthorized fund transfers, has taken a dangerous leap in sophistication. Moving beyond messaging apps, scammers are now using professional collaboration platforms for deception.In a recent case, scammers created a fraudulent group chat on Microsoft Teams using the names of two directors of an industrial company. They faked a discussion about a contract and manipulated an employee into transferring Rs 2.3 crore of company funds to them. An FIR was registered by the south Cyber Police and investigations are on.The incident occurred on July 31. A senior VP (finance) working with the industrial company found himself added to a group chat on Microsoft Teams. It was titled ‘work group’. Two individuals, with the same names as the company’s directors, were already a part of the group chat and were discussing a contract. As the company typically held meetings over Microsoft Teams, the victim did not suspect anything.During the discussion, one of the ‘directors’ quizzed the senior VP about the company’s bank balance. The senior VP disclosed the figure. Subsequently, the ‘director’ instructed that Rs 2.3 crore be transferred to a rubber firm in West Bengal for business. He provided the rubber firm’s bank details. Accordingly, the senior VP asked his subordinate to make the payment via RTGS and shared a copy over the group chat.Later that day, another employee who was checking daily transactions made through the company’s bank account raised a query about that particular payment. The senior VP was questioned as to whether the directors had spoken to him on the phone about making the payment. He denied. The employee then verified with the directors and found out that they were never a part of any group chat with the senior VP.The company management immediately approached the Cyber Police, who were able to block the money in the beneficiary’s account before it could be withdrawn by the scammers.Cyber Police have cautioned people against making any monetary transfers of company funds without making a direct phone call and verifying the demand. Experts said organisations should build a culture where employees do not hesitate to verify unusual requests involving money, sensitive data or access privileges, irrespective of who appears to be making the request.
