A polished logo, real employee name, and convincing offer letter do not prove that a recruiter is genuine. Employment scammers impersonate known companies, copy legitimate vacancies, and move conversations to text or messaging apps. Their goal is often to collect personal information, obtain an upfront payment, or make you deposit a fake check.
The safest response is to verify outside the message. Do not click the recruiter's link, call the number in the signature, or use the contact details in the offer letter. Open the employer's site yourself, find its careers page and main contact channel, and ask whether both the role and recruiter are real.
Watch for the strongest warning signs
Unexpected outreach is not automatically fraudulent, but an immediate offer for a job you never applied for deserves caution. Be especially careful when the role has unusually high pay for simple remote tasks, the job description is vague, or the recruiter creates urgency before answering basic questions.
Inspect the full sender address, not just the display name. Free email accounts and lookalike domains are common in impersonation. A hyphen, extra word, swapped letter, or unusual top-level domain can imitate the employer. The real-or-fake email guide explains how to compare domains and avoid links embedded in the message.
The Federal Trade Commission warns that fake recruiters may ask for a driver's license, Social Security number, or bank details before a real interview. Its job scam guidance also recommends checking the recruiter and company independently. Normal hiring eventually requires sensitive information, but timing and the secure onboarding channel matter.
Requests for money are a decisive red flag. Do not pay for equipment, training, software, background checks, certification, visa processing, or a promise to reserve the position. Do not buy gift cards or cryptocurrency for an employer. A legitimate employer does not need a candidate to move personal funds on its behalf.
Fake-check schemes often look like remote-work onboarding. The scammer sends a check for equipment, asks you to deposit it, and tells you to pay a vendor or return the difference. Your bank may show temporary availability before discovering the check is fake, leaving you responsible for money you sent.
Verify the company, role, and person separately
Type the company name into your browser and navigate to its official careers page. Search for the exact role, location, and requisition number. A copied vacancy can still be used in a scam, so the listing alone is not enough; apply through the official site or contact the company through a channel you found there.
Search the recruiter's name together with the employer and role. Compare the claimed title, work history, location, and profile activity. A familiar profile may have been copied or compromised, so confirm through the employer rather than relying only on LinkedIn or another platform.
Use the employer's main phone number, published recruiting address, or careers support form to ask a narrow question: does this person recruit for this role? The general business-contact verification workflow can help you organize public clues, but it does not replace confirmation from the employer and must not be used to screen job candidates.
If the recruiter wants to use only chat, asks you to install unfamiliar software, or refuses a normal phone or video conversation, stop. Also avoid opening attachments until the sender is confirmed. A professional-looking document can carry malware or lead to a credential-stealing page.
Protect your identity during the application
At the early stage, share only what is needed to discuss your experience and availability. Remove unnecessary identifiers from a public resume. Do not send a Social Security card, passport scan, driver's license, banking credentials, or tax forms to an unverified contact.
If the contact uses a personal profile or unusual story to build trust, use the catfish-check principles: compare names, photos, locations, and timelines, but treat matches as clues rather than proof. A stolen photo can appear beside accurate facts copied from a real employee.
Keep screenshots, email headers, phone numbers, payment instructions, and the original job post. If the approach is fraudulent, report it to the platform and the impersonated company. If money or credentials were shared, contact the bank immediately, change exposed passwords, and use the official recovery steps for the country involved.
Use a two-minute pause before acting
Pressure is part of the script. Before replying, ask four questions: Is the job listed on the employer's own site? Did I confirm the recruiter through a channel I found independently? Has anyone asked for money or sensitive data too early? Do the email domain, role, and timeline agree?
If any answer is unclear, pause the process. Review the broader scam-payment rules and Recordwell trust principles: verify outside the conversation, separate evidence from inference, and do not let urgency lower the standard of proof.
Frequently asked questions
Can a real recruiter contact me unexpectedly?
Yes. Unsolicited outreach happens, but it should lead to a verifiable company identity, a plausible role, normal interviews, and no request for upfront payment or premature financial information.
Does a corporate email address prove the offer is real?
No. Domains can be imitated and accounts can be compromised. Confirm the role and recruiter through the employer's independently located careers page, main number, or recruiting contact.
What should I do if I already sent money or identification?
Contact your bank or payment provider immediately, preserve the messages, report the account and listing, change exposed passwords, and follow official identity-theft or fraud-reporting guidance in your country.