Meeting Invitations & False Links Target Real Estate Agents & Brokers
- Adam Garrett
- Apr 17
- 6 min read
I recently began receiving a high volume of meeting link scams. I'm not the only one. Real estate agents & brokers, especially, as well as others, are being targeted around the country. In one case, the scammer was bold enough to even ask me about what operating system I used, Windows or Mac. If you offer to provide a link, they'll still try to provide one if they continue the conversation. In other cases, they'll stop the conversation to chase after those who are more ignorant. You might be surprised at how persistent they are. If you provide a link and they are willing to keep up their attempts to scam you, they'll often say that the link doesn't work.
Identify a bad link by hovering without clicking:
When they provide a link directly via email or a calendar invitation via email, it may look innocuous, but the hyperlink will not match how the link should look. Here are what legitimate links look like from a few examples:
Google Meet links start with https://meet.google.com/
Teams Meet links start with https://teams.live.com/meet
Zoom meeting links start with something like this: https://us02web.zoom.us/
After you've identified a scam, be sure to report phishing with your email provider.
Here are some other articles talking about the problem:
Boise Regional Realtors Warning About Meeting Link Scams
Per a recent Boise Regional Realtors warning about meeting link scams:
As scammers become smarter and more sophisticated, your online security practices and vigilance grow in importance.
Several members have contacted BRR in the last week to notify us of an increased frequency in “potential clients” requesting Zoom meetings to discuss potential transactions. The “client” refuses to discuss over the phone or is insistent upon a Zoom meeting and sending the Zoom link, themselves. The scammer will send a link disguised as a Zoom link to the agent and when clicked upon, malware is instantly downloaded to the agent’s device.
This is happening across the country and seems to be increasing in prevalence here, locally.
We remind members to maintain careful control over your online practices:
Have a consistent verification process for all new customers/clients.
NOTE: Scammers are relying on fake identity proof so additional verification of property ownership/identity need to be put in place beyond asking for a customer/client’s ID.
If you choose to host a virtual meeting with a new/continuing client, create the meeting link yourself and send.
Do NOT click any links from anyone you don’t have rapport with (even then, they could be hacked so check in before clicking whenever someone links something to you by alternate means such as a phone call).
Should you become victim to one of these malware scams, file a complaint with the FBI’s Internet Crime Complaint Center (IC3) for federal action, and the Federal Trade Commission (FTC) for consumer protection and broader tracking, then contact your local police and financial institutions if money or data was compromised.
These scams come in addition to vacant land scams and other virtual scams plaguing the industry and community. Additional scams and safety practices will be discussed at our upcoming Real Estate Industry Safety courses on February 26th and March 10th (2 CE; free for active BRR Members).
Be careful out there and do what you can to protect yourself and your business.
ADDITIONAL RESOURCES FROM THE MERIDIAN POLICE DEPARTMENT:
Pennsylvania Association of Realtors Meeting Link Scams Warning
Per Scam Alert: Agents Targeted with Zoom Links containing Malware:
"Scammers have found a new way to target real estate professionals, according to recent reports.
So-called potential buyers are targeting agents with listings on the MLS, Realtor.com and Zillow, showing an interest in a listed property. Before submitting an offer, the potential client insists on having a Zoom meeting to discuss the property with the agent.
The scammer sends a Zoom link, but when an agent clicks on it, malware is installed on their computer or phone.
“These scammers are getting more sophisticated,” said Shanna Terroso, executive officer of the Realtors® Association of York and Adams Counties Land. “We’ve had several members reach out to tell us these potential clients send this link and refuse to meet in person or through a phone call. One agent clicked on the Zoom link that the scammer sent, and immediately malware was downloaded onto his computer.”
Terroso reports another agent questioned the so-called potential client and asked to do a phone call and the scammer refused to speak on the phone.
RAYAC has reminded Realtors® to be vigilant when working with clients whom they do not know.
Do not click on links sent by individuals you do not know or cannot verify.
Always create the Zoom link yourself and share it with your client.
Terroso has previously reported several vacant land scams in their region, and the association has worked to raise awareness among its members about the issue. However, scammers now appear to be reaching out to agents in surrounding counties, trying to get other agents outside the area to sell vacant land.
“We have about 40 vacant properties that have been subject to these scams,” Terroso said. “Scammers appear to target vacant land that has had the same owner for many years and the owner lives out of state. Our members have been encouraging property owners to contact their local recorder of deeds office to sign up for property records notification alerts.”
“Scammers have been sending fake proofs of identity, so an identification isn’t enough anymore. It’s important to try to meet in person or to try to verify that they are the rightful owner of the property before agreeing to sell the property.”"
WVVA Warning about Calendar Meeting Invitations
Per a recent WVVA warning on meeting link scams:
"In this week’s scam, you open your Microsoft Outlook calendar and spot an unexpected meeting invite. The title is alarming, like “Final Notice: Payroll Acknowledgement Required,” and it looks urgent. When you open the event, there is a PDF attachment with a QR code and instructions to scan it for more information.
It is a scam. The invite was sent by cybercriminals. If you scan the QR code, you can be taken to a fake Microsoft 365 login page. It may look real and even include a quick “security check,” then prompt you to enter your username and password to view details. If you type in your login info, scammers can steal it and potentially access your email and other accounts tied to it.
How to protect yourself:
If a suspicious meeting appears on your calendar, do not click links and do not open attachments in the invitation.
Treat strange or alarming meeting invites like suspicious emails and follow your organization’s process for reporting them.
Urgent language like “Final notice” is a common pressure tactic. Stop and verify before taking action."
Usherwood Office Technology: Meeting Invite Phishing Is the Latest Cybersecurity Scam to Watch (Red Flags)
Here is the red flags section of this more extended article than the others by Usherwood on meeting invitation phishing, where I highlight the pertinent red flags in red common to the real estate scam:
"These inconsistencies are often easy to spot:
Vague or generic event names
“Security Alert Meeting,” “Important Update,” “Account Issue,” “HR Notification”
Odd scheduling
Meetings at strange hours or with unfamiliar time zones.
Organizers you don’t recognize
This can be from a email address you don’t recognize often seen as random numbers or letters or external senders disguised as internal departments with some error in the name.
Unexpected attachments
Real invites rarely include a PDF or Word document.
Branding that feels slightly ‘off’
Incorrect logos, blurry icons, odd capitalization (e.g., “TEAMS meeting”).
2. Technical Red Flags
These require a closer look:
Links that don’t match your meeting platform
Hover over “Join Teams Meeting,” does it actually lead to Microsoft?
External organizers posing as internal contacts
Example: “it-support@secure‑help‑365.com”
Mismatching fields
The organizer email doesn’t match the sender email.
3. Behavioral Red Flags
These focus on how the invite makes you feel:
Urgency or pressure
Phrases like; “Mandatory immediately,” “Must attend to avoid account suspension”
Authority impersonation
Appears to come from HR, legal, IT, or even your boss.
Surprise meetings
No context, no prior conversation, no attached agenda.
If anything feels rushed, odd, or out of character, trust your instincts."
Usherwood Office Technology: Meeting Invite Phishing Is the Latest Cybersecurity Scam to Watch (How to Protect Yourself)
Here is the How to Protect Yourself section of this more extended article than the others, where I highlight the pertinent red flags in red common to the real estate scam:
"Hover before clicking: Check the real destination of “Join Meeting” links.
Verify the organizer: Use Teams chat, email, or organization information hubs to confirm unusual invites.
Delete suspicious invites: Remove both the email and the calendar event.
Check your default settings:
In Outlook, make sure auto accept for calendar invites is disabled.
Under File, Options, Calendar, Auto accept/decline settings
In Google Calendar, enable “Only show invitations from known senders.”"
Comments