Zoom scams
Last updated September 19, 2026
The short answer
Zoom scams use fake meeting invites that install malware through a bogus update prompt, and fake job interviews run over Zoom chat to harvest personal data. Zoom updates come from inside the app or zoom.us — never from a link in a meeting invite.
A meeting invite is an ordinary thing to click, which puts Zoom in an unusual position: the brand is not really the target, it is the arrival mechanism. Two distinct scams use it. One is malware delivery, where a link claims your client needs updating before the call can start. The other is the fake job interview, where a "hiring manager" conducts the whole process by Zoom chat and collects the data a real onboarding process would collect.
How Zoom scams work
- 1
Fake invites with update prompts
An invite link opens a page saying your Zoom client is out of date and must be updated to join. The download is malware or a remote-access tool.
- 2
Fake job interviews
A recruiter schedules an interview conducted entirely in Zoom chat, with no audio or video. It ends in an offer requiring a Social Security number, bank details for direct deposit, and sometimes a payment for equipment.
- 3
Credential phishing through recordings
Emails about a missed meeting or a shared recording link to a fake Microsoft or Google login page.
- 4
Meeting intrusion and screen capture
Uninvited participants join poorly secured meetings to capture screens, documents and personal information.
Warning signs
- A meeting link prompts you to download an update to join
- An interview is conducted entirely by chat with no video or voice
- A job offer arrives after one text-only conversation
- You are asked for a Social Security number or bank details before a written offer
- You are asked to buy equipment and be reimbursed later
- A "recording" link asks you to sign into email
- The meeting invite comes from a personal address for a corporate matter
Examples
The update before the call
A candidate clicks a Zoom invite for an interview. The page says the client is out of date and offers an installer. The installer is a remote-access tool. The "interview" never happens, and the machine is accessed that evening.
The chat interview
A recruiter conducts a 40-minute interview entirely in Zoom chat, citing a broken microphone, then makes an offer. Onboarding requires a Social Security number, a driving licence photograph and bank details for direct deposit. The company is real; the recruiter is not affiliated with it.
What to do
- Update Zoom only from inside the app or from zoom.us.
- Join meetings from a calendar invite you were expecting, not a link in an unsolicited email.
- Refuse text-only interviews. Insist on video or a phone call.
- Never give a Social Security number or bank details before a verified written offer from a domain you have checked.
- Verify recruiters by calling the company's published number.
Report it to Zoom
Report abuse and phishing through Zoom's trust centre. Zoom updates are delivered inside the app, never through a meeting link.
Getting your money back
If an "update" was installed, disconnect, remove the software, run a full scan, and change passwords from a different device — remote-access tools installed this way persist. If you gave a Social Security number and identity documents in a fake interview, place free credit freezes at all three bureaus and file at IdentityTheft.gov; that data is used for account opening and fraudulent unemployment claims. Report the fake recruiter to the real company, which will want to know, and to the platform the approach came through.
Frequently asked questions
Does Zoom ever require an update through a meeting link?
No. Zoom updates from inside the application or from zoom.us. A page that appears when you click an invite and offers an installer is delivering malware — this is one of the most common ways remote-access tools are installed on personal machines.
Is a text-only job interview ever legitimate?
Almost never for a real role. Interviews conducted entirely by chat exist so the "recruiter" does not have to be a real person or speak a convincing accent. Insist on a video call or a phone call, and verify the recruiter against the company's published contact details.
When should an employer get my Social Security number?
After a verified written offer that you have confirmed with the company directly, as part of documented onboarding — never during an interview, and never to "run a background check" before an offer exists. Bank details for direct deposit come later still.
Other companies scammers impersonate
Scams reuse their scripts across brands. If you were contacted about Zoom, these are the guides worth reading next.