Watch out for fake Zoom invitations

A man holding a cell phone with a white and red scam email graphic above the screen.
Portrait photo of Emily Duran

By Emily Duran
 IT Communications Intern

Published July 7, 2025

Hackers are sending fake “Zoom invitation” links to UBmail accounts that, if clicked, will install malware, giving the attackers full access to your device and information. Learn how to protect yourself.

What does the scam look like?

Members of the University at Buffalo community have recently reported receiving messages to their UBmail that claim their account may become deactivated, prompting them to join a Zoom meeting in order to avoid the deactivation. The messages include phishing links disguised as Zoom invites, looking similar to this one: 

A Zoom message giving an invitation to a meeting, displaying the date, meeting ID, and the host, Gerald.

These scam attempts are using compromised UBmail accounts and appear to be official messages from UB; however, these messages are not legitimate. These links are being sent as an attempt to install malware on UB and personal devices, giving the attacker full access to the machine.

What to do if you receive an invite

If you receive an invite like this, it is important to determine if the message is authentic. Ask yourself if you were expecting to receive an invite, do you trust the source it is coming from, and whether they are asking for private information.

UB will never send deactivation requests that require you to login, fill out a form, or install software from anywhere but a legitimate site; a message is likely a scam if you hover over a sent link and see it does not point to Zoom or UB. If you do receive a message that does these things and believe it to be a phishing attempt, take the following actions:

 

  1. Ignore the message: Do not reply, provide your password or any sensitive information, or click any links.
  2. Block the sender: Block the email or number you received the message from to prevent further contact.
  3. Report the message to UBIT: Follow the directions on UBIT’s Safe Computing pages to report the message as a phishing attempt to UBIT to alert them to the threat and ensure your security.

If you do click the link and software downloads on your device, you must contact the UBIT Help Center immediately for assistance in reimaging your device, or staff can contact their departmental IT staff for assistance.

 

Need help?

To learn more about keeping your technology and information secure, visit UBIT’s Safe Computing pages.

UBIT keeps an updated list of current security alerts that allows you to stay vigilant when looking for possible phishing scam attempts.

If you believe you have been scammed, contact the UBIT Help Center immediately. Students can also visit the UB Tech Squad for more technology and security assistance.

UB Information Technology News keeps UB students, faculty, and staff informed about their IT services and showcases creative collaborations between UBIT and the campus community. Published by the Office of the Chief Information Officer at UB and distributed via email as The Monthly Download. Edited by Diana Tuorto, IT Communication and Engagement, dianatuo@buffalo.edu.