Scammers Target Chinese Users via Western Enterprise Tools Microsoft Teams and Cisco Webex

Enterprise communication software developed by major Western technology companies is increasingly being exploited by cyber fraudsters operating in China to carry out financial scams, according to reporting by Wired. Applications including Microsoft Teams, Cisco Webex, and Zoho Cliq have become prominent channels for social engineering tactics, such as romance and investment schemes known as "pig-butchering" scams, by leveraging corporate brand trust and enterprise administrative controls.

The schemes typically originate on domestic Chinese social media or dating services before scammers persuade targets to shift communications onto corporate productivity apps. In one case documented by Wired, a Beijing resident identified by her last name, Zhao, lost over $100,000 after a scammer posing as a Microsoft researcher provided her with pre-configured Teams credentials. After convincing Zhao to take out bank loans to fund a fraudulent cryptocurrency venture, the perpetrator deactivated her account access and disappeared, leaving her unable to retrieve chat logs to provide to police. Other victims across China have reported losses ranging from $1,500 to $300,000, with only one individual successfully recovering a portion of their funds by tracing recipient bank accounts.

The frequency of these attacks has led local law enforcement bureaus in China to publish warnings specifically identifying Teams as a tool for fraud, while Chinese workplace networking platform Maimai implemented automated warnings for internal messages containing keywords such as "Teams" and "Skype." A Wired analysis of 500 reviews on Apple’s Chinese app store over an 18-month period found that 30 percent contained complaints regarding scam activity on Teams, with the oldest complaints dating to 2022. One user review from January detailed a loss of 1.48 million RMB ($220,000). Steven Masada, global head of Microsoft’s digital crimes division, told Wired that the company investigates abuse reports, takes action against non-compliant accounts, and continues to bolster protections against fraudulent behavior. In June, Microsoft introduced warning banners for Teams users in China and shut down the personal version of the service in the country, restricting access exclusively to enterprise accounts.

Other Western enterprise software platforms face similar abuse in the Chinese market. Analysis by Wired revealed that 71 percent of the more than 150 reviews for Cisco Webex on Apple’s Chinese app store since February 2025 referenced fraudulent activity. Cisco did not respond to requests for comment. Meanwhile, software maker Zoho detected fraud on its collaboration application Cliq. Zoho spokesperson Sam Wunderl stated that the company uncovered suspicious activity through internal monitoring, suspended accounts linked to suspected scammers, disabled online payments for Cliq in China as of August 27, and plans to discontinue the free tier of the app in the country going forward.

Scammers exploit several structural features of Western workplace software. Unlike consumer messaging platforms such as Telegram and WhatsApp, services like Teams and Webex are accessible in China without being blocked by the Great Firewall. By creating enterprise organization accounts for their targets, scammers maintain administrative rights that allow them to revoke account access and erase message logs once a transaction is completed. Integrated tools like screen sharing and remote desktop access also provide fraudsters with increased technical leverage over target devices. Furthermore, the global reputation of corporate software developers can disarm targets; Tan Chenxin, a software engineer living in New York, reported nearly falling victim to a scammer impersonating law enforcement officers who instructed him to download Cisco Webex for a video meeting.

The surge in fraudulent activity underscores an ongoing operational challenge for Western tech vendors operating in China. While domestic platforms like WeChat and Xiaohongshu actively scan conversations to display automated security pop-ups when investment or payment keywords are detected, Western corporate tools have historically lacked automated anti-fraud detection tailored to domestic consumer threats in the Chinese market. As a result, software vendors are increasingly forced to restrict free accounts and alter security policies in the region.