Hunting for a new job is already a daunting task. Now, job seekers have to navigate hidden risks, including worrying whether the job is even real. Fake recruiter profiles, cloned company websites, fraudulent job postings and unsolicited messages or phone calls are all new ways that threat actors (scammers) are tricking unsuspecting job seekers into handing over financial or personal data. These scams can appear on legitimate job boards, social media platforms and professional networking sites, making fake opportunities difficult to distinguish from real ones.
Scammers frequently target people looking for work because they may be more likely to respond to ads, messages or calls without confirming the source. This lack of caution can be driven by financial anxiety and stress that job seekers often experience, making them more susceptible and less likely to question suspicious postings. This urgency is exploited by promises of fast, easy, flexible and often remote work opportunities that seem too good to be true, often promising unusually high pay for minimal effort. The goal may be to steal money, access sensitive personal information or manipulate the victim into carrying out various acts of fraud.
Learn a few easy ways to recognize fake job recruitment and protect your data and money from bad actors.
Tips to Spot Fake Listings
- Unsolicited Contact: Be wary of recruiters contacting you without notice for a job you did not apply for. Scammers often claim they found your profile or resume online. An unexpected message does not automatically mean a scam, but verify the recruiter and position independently to make sure.
- Fast-Tracked Hiring: Being offered a job immediately after a short text or chat interview is a common scam tactic. Legitimate companies usually have a thorough interview process that consists of either web-based or in-person interviews.
- Unrealistic Compensation or Benefits: Fake listings offering salaries high above market rate, or unusually high pay for minimal work hours, are often used as bait to lure potential victims. Compare the advertised compensation with similar positions and research the company before proceeding.
- Non-Professional Communication: Emails from personal email providers (i.e., emails outside the company’s website domain) or communication through messaging apps (WhatsApp, Signal, etc.) can be a telltale sign of a scam. The messages may contain poor grammar, generic messaging or inconsistent branding, although AI tools are making these signs harder to spot. Legitimate recruiters will almost always contact you from a company domain.
- Interviews that are not conducted on an official channel: Companies typically do not use messaging apps that allow users to be anonymous. Employers use a variety of communication tools, but apps such as these allow them to request financial information and not be traced. Verify the interview and position through contact information you obtain independently from the company.
- Vague Job Description and Requirements: Legitimate job postings often have very detailed and specific qualifications listed. Be wary of postings that list simple requirements such as being of legal age, knowing how to read or knowing how to type. These are purposely broad to ensure almost anyone is “qualified” in order to give scammers many different targets.
Best Practices for Job Seekers
- Verify the employer. If using job boards and websites to search for listings, make sure to confirm that the company exists and the post comes from official company recruiters or accounts. Verifying the position on the official company website is also encouraged, although not always an option. Search for the company or recruiter along with terms like “scam,” “fraud” or “complaint” to be certain they are not associated with scams.
- Never accept checks from “recruiters”. Many scammers will offer job seekers an “equipment stipend” or “training kits,” which involves the victim cashing a fraudulent check, buying equipment from the “company store” or wiring money. The check may initially appear to clear, only to be identified as fraudulent at a later date, leaving you responsible for the money transferred. No employer will ask you to deposit a check then return or forward any of the funds.
- Never pay to be interviewed or employed. Never agree to an interview or employment that requests payment from you upfront. Such requests could be disguised as application, training or recruitment fees. These requests may ask you to pay via bank transfer, wire transfer or cryptocurrency. Once funds are paid, they can be very difficult to recover.
- Avoid suspicious links. Do not click links in unexpected recruiter messages until you verify the sender. Ensure the link goes where it is supposed to by hovering over it. Many fraudsters utilize typosquatting, a method that makes fraudulent URLs appear legitimate, as well as hiding malicious links as hyperlinks.
- Never share personal information. Legitimate employers will not ask for sensitive information, such as Social Security numbers, bank account information or a state-issued identification or driver’s license number early in the hiring process. Requests for this information before hiring are often a red flag.
- Guard your data. Before submitting your resume or personal information on any platform, read or ask about their data privacy policies. Look for clauses that mention “data sharing” or “data selling”. If they are not transparent about using your data, do not share information with them. Remember, your data is valuable!
- Bogus job postings can appear on legitimate job listing websites. Web developers try to stay ahead of these scammers, but bogus listings do show up quite often. They may be posted by fake companies, or they can even be from legitimate employers whose accounts may have been hacked. If you encounter a suspicious listing, recruiter or message, report it to the website or platform where you found it.
Types of Scams to Look Out For
- Government job fraud: Scammers impersonate government agencies or advertise nonexistent government jobs. They may request application fees, person information or payment. Government (state, local, federal) jobs can be searched for on official government websites, and applicants should never have to pay to obtain a position in a government agency.
- Job placement scam: Fraudulent employment agencies or recruiters may promise to find you a job in exchange for an upfront fee. They may advertise nonexistent positions, provide misleading information about employers or disappear after receiving payment. Legitimate staffing firms generally receive compensation from the hiring organization rather than requiring job seekers to pay for access to employment opportunities.
- Fake check scam: A potential employer will send you a check and asks you to deposit it. They allow you to keep a portion, and request you send the remainder to another person or use it to purchase equipment. The check will be fraudulent and once the bank discovers the issue, you could be held responsible for the funds.
- Work-from-home scams: Fake employers advertise jobs that promise high income for remote work that requires little experience or effort. These scams exploit the popularity of remote work. Victims could be asked to purchase starter kits, pay for training, ship merchandise or provide sensitive information.
- Task scams: Task scams typically target victims with an ad promising quick money simply by completing tasks in an app or online platform. The way you are “paid” is from a commission on each click you complete. Rather than paying you, they will eventually request you to deposit your own funds. Read more on task scams under the cyber habit section of our July 2025 newsletter.
If you feel you have been the victim of or have seen a fake job posting, unsolicited recruiter contact or a check cashing scam, report it to either the Federal Trade Commission (FTC) or Better Business Bureau (BBB). If you sent money, contact the company you used for payment right away and inform them of the scam; you may be able to get your money back.
Searching for your dream job should lead to a new opportunity, not financial loss or identity thefts. Scammers make fake offers look remarkably convincing by impersonating real companies, copying legitimate job postings and using information found on professional networking sites.
When job hunting: slow down, verify before you contact an employer and never pay to get paid. Always research employers and confirm the position independently using a verified source, like an official company website. If something feels off, trust your intuition and do not engage with the job listing or the fraudulent employer. Taking the extra time to verify an opportunity could save you significant time, money and frustration.
Cyber Habit of the Month: Recognize, Avoid and Report Device Code Phishing
Device code phishing is a social engineering attack that tricks you into giving scammers access to your account by approving a sign-in request that you did not initiate. A scammer may contact you by email, text or phone call and claim that you need to complete a verification step, fix an account problem or enter a code to access a service. The website where you enter the code will often look realistic and legitimate. The attacker then uses that code to authenticate themselves as you, potentially gaining access to any number of accounts that you have.
Never enter or share a device or sign-in code just because someone contacted you requesting you complete the action. If you receive such an unexpected request, stop and verify that request through the service’s official website or app, or ignore it entirely. If you believe you approved a fraudulent sign-in, immediately change your password, remove unfamiliar devices and report it to the platform’s support team. Monitor your accounts carefully for any suspicious interactions following the phishing attempt.