Singapore CFO Nearly Loses S$120,000 in Microsoft Teams Boss Impersonation Scam
A company CFO in Singapore nearly lost S$120,000 after scammers impersonated the firm's chairman on Microsoft Teams and instructed an urgent fund transfer. The incident, reported by both Malay Mail and The Straits Times, demonstrates that corporate impersonation scams are no longer confined to email but have migrated to enterprise collaboration platforms.
The scammers created a convincing Microsoft Teams profile using the chairman's name and photo, then sent direct messages to the CFO with instructions to transfer funds immediately to a third-party account. The urgency of the message — reportedly phrased as "Do it now" — was designed to override normal verification procedures.
This attack represents an evolution of traditional business email compromise (BEC) adapted for modern workplace platforms. The scam follows a predictable pattern:
The attacker researches the target company through LinkedIn, the company website, and public filings to identify key decision-makers and finance staff. They create a Teams account mimicking the CEO or chairman, including the correct name, job title, and profile photo.
The fake executive contacts a finance team member directly via Teams chat, requesting an urgent payment. The message typically cites a confidential deal, a time-sensitive supplier payment, or an acquisition that must not be discussed with other staff. The pressure to act immediately and maintain secrecy prevents the target from following standard approval procedures.
Can scammers create fake Microsoft Teams accounts?
Yes. Scammers can create Microsoft 365 accounts with any display name and profile photo. If external communication is enabled, these fake accounts can message employees directly via Teams.
How do I report a corporate impersonation scam in Singapore?
Report to the Singapore Police Force at 1800-255-0000 or file a report online at www.police.gov.sg. If Malaysian bank accounts are involved, also report via SemakMule at semakmule.rmp.gov.my.
⚠ Red Flags
- !External account indicators — Most enterprise platforms mark external users. A message from the "chairman" tagged as external is an immediate red flag.
- !Urgency and secrecy — Legitimate executives rarely demand same-day payments while simultaneously forbidding staff from consulting colleagues.
- !Unfamiliar payment details — The transfer is directed to an account not in the company's existing vendor or payroll records.
- !Chat-only communication — The "executive" is available only on chat and cannot take phone calls or video calls.
- !Unusual timing — Requests arrive outside normal business hours or when the real executive is known to be travelling.
🛡 How to Protect Yourself
- 1Verify all payment instructions by calling the executive directly on their known phone number
- 2Implement mandatory dual-approval for fund transfers, regardless of who requests them
📞 How to Report
- 1Call 997 (National Scam Response Centre, Malaysia) or report to Singapore Police Force at 1800-255-0000
- 2Lodge a police report immediately if funds have been transferred
- 3Report via SemakMule (semakmule.rmp.gov.my) if Malaysian accounts are involved
Want to learn more?
Book a scam awareness workshop for your family, community group, or organisation.
View Anti-Scam Programme