Don’t Take the Bait: How to Spot Fake File-Sharing Requests

File-sharing services like Google Drive, OneDrive, and Dropbox make it easy to share contracts, invoices, and photos instantly. Unfortunately, scammers are exploiting that convenience to launch phishing attacks that look legitimate, right down to the logos and email addresses. These scams are particularly dangerous because they target both individuals and businesses who regularly exchange documents online.

How the Scam Works

You receive an email or text claiming someone has “shared a document” with you. The message looks authentic, maybe it includes your name, a familiar company name, or even references a real project. The sender might appear to be your co-worker, accountant, or even a financial institution. When you click the link, it takes you to what looks like a login page for a well-known file-sharing site. Once you “sign in,” your credentials go straight to the scammer.

From there, they can access your email, contacts, and financial accounts often before you even realize anything has happened. In some cases, the scammers even upload malware that can infect your system and steal stored passwords or data.

Signs of a File-Sharing Scam

• The sender’s address doesn’t match the real domain of the file-sharing service.
• The message pressures you to open or review the document urgently.
• The shared file has a vague name like “Invoice_Notice” or “Urgent_Doc.”
• The link looks off, for example, “drive-secure-share.com” instead of “drive.google.com.”

Protecting Yourself and Your Business

Before opening any shared document, verify it with the sender directly — preferably through a new email thread or phone call. Hover over links to see where they lead before clicking. If the URL looks suspicious or doesn’t match the service’s domain, don’t open it.

Enable multi-factor authentication (MFA) on your email and file-sharing accounts whenever possible. MFA adds an extra step for scammers to overcome, even if they’ve obtained your password.

Finally, educate your co-workers and family members about these scams. File-sharing fraud relies on urgency - slow down and verify before you click.