Scammers are Hiding Behind PDFs

Scammers are finding new ways to trick people by sending fake PDF files that look like invoices or official documents from well-known companies. These files often come through email, but sometimes they arrive on WhatsApp or Teams. To make the scam more believable, criminals may use hacked accounts and pretend to be a colleague or client.

At first, opening the PDF seems harmless. You might see a form or an invoice asking you to confirm a payment or update your account. But once you click a link in the file, you are sent to a fake website that looks like your bank or an online store. The goal is to steal your login details or banking information.

The extra step of opening a PDF before seeing a dangerous link makes the scam more convincing. Because PDFs look professional and safe, people are less likely to recognise the danger.

What you should do

• Be careful with PDFs: only open them if you know who sent them and why.

• Stay alert on unusual channels: if you get a PDF on WhatsApp or Teams, double-check.

• Verify if unsure: contact the sender using their official details, not the ones in the document.

Following these steps not only keeps you safe but also improves your Behavioural Risk Score.