Fake Teams Meeting Link? How to Spot a Teams Scam

In short: a real Teams meeting link starts with https://teams.microsoft.com/ or https://teams.live.com/ (Teams free). But a real domain does not prove a real sender: anyone can create a free Teams meeting. Be wary of any “meeting” that asks you to download a file, enter your password on an unusual page or act urgently.

Phishing campaigns imitate Teams invitations because everyone is used to clicking them. Here is how to check a link in a few seconds.

What a genuine Teams link looks like

https://teams.microsoft.com/l/meetup-join/… (classic format, long) or https://teams.microsoft.com/meet/…?p=… (newer, shorter format);
https://teams.live.com/meet/… for Teams free (personal accounts);
in an email received at work, the link may be rewritten as …safelinks.protection.outlook.com/?url=… by Microsoft Defender: the real address follows url=.

Read the domain right before the first single /. teams.microsoft.com.example.net or teams-microsoft-meeting.com are not Microsoft.

Is a teams.live.com link legit?

The domain is Microsoft’s, so the page is genuine. But teams.live.com hosts the free version of Teams: anybody, including a scammer, can create a meeting there in seconds. Judge the sender and the context, not just the domain.

Warning signs of a fake Teams invitation

You are asked to download a file or an “update” to join. A Teams meeting opens in the app or in the browser, never through an attachment.
A page asks for your Microsoft password outside login.microsoftonline.com or login.live.com.
An unexpected meeting from an unknown sender, or from “IT support” or “Microsoft” that contacts you first.
Urgency: account blocked, invoice to pay, delivery problem.

And short links?

A short link hides the final address, so only click short links from people you trust. MSTeams.link is built for Teams meeting links: Teams destinations are shortened directly, other destinations require a signed-in account and a security check, and blocked domains are refused. If in doubt, ask the organizer for the original link or open the meeting from your calendar.

What to do if you clicked

Do not enter any password or open the downloaded file.
If you entered your password, change it right away and turn on two-step verification.
At work, report the email or chat to your IT team (or with the Report button in Outlook).

FAQ

Can a Teams meeting link contain a virus?

The genuine link only opens Teams. The danger comes from fake pages imitating Teams and from files you are asked to download.

How do I create a test Teams link without inventing one?

Create a real one in ten seconds with Meet now: see how to create a Teams meeting link.