If a voicemail notification is unexpected, do not use its Play or Listen button. Open your phone or known phone-system portal directly.
What the scam wants
The button often opens a Microsoft or Google sign-in copy and claims authentication is required to hear the recording. Other versions deliver an HTML attachment, QR code, or malware download.
Fast verification
- Check the voicemail application or desk phone directly.
- Confirm whether your organization’s real phone system sends audio attachments or portal links.
- Inspect the full sender address and destination without clicking.
- Report unfamiliar versions so IT can search for copies sent to coworkers.
If credentials were entered
Contact IT immediately. Change the password through the official portal, revoke suspicious sessions, inspect MFA settings, and check mailbox forwarding rules.
This page provides general security guidance, not a guarantee that any individual message is safe. When money, passwords, remote access, or sensitive records are involved, verify through a separate trusted channel.