A job offer can look convincing even when the person behind it is not connected to the named employer. Scammers imitate legitimate companies and recruiters across job boards, text messages, social media, and messaging apps. The safest response is not to judge a message by one suspicious detail. Instead, use the same verification workflow every time—before you share sensitive information, accept an interview, download unfamiliar files, or send money.
The risk is significant. The Federal Trade Commission reported that job-scam losses exceeded $220 million in the first half of 2024. It also reported approximately 20,000 task-scam reports during that period, about four times the number reported during all of 2023. These scams may begin with an unexpected message and later demand a deposit, cryptocurrency payment, or other payment to continue. Read the FTC’s job-scam data spotlight for the underlying findings.
Start with the message, not the promise
Treat the first contact as a verification point. A message that arrives unexpectedly deserves more checking than one connected to an application you can independently confirm. LinkedIn’s 2026 Job Search Safety Pulse identifies early requests for sensitive information, upfront fees, urgency, suspicious profiles, and off-platform communication as leading warning signs. Its report says 90% of reported scam messages involved attempts to move conversations off-platform. See LinkedIn’s Job Search Safety Pulse for the report’s recommendations.
Moving to a personal email address, text thread, or messaging app is not automatic proof of fraud. However, an early push to leave the original job platform removes useful context and can make the recruiter harder to verify. Keep the conversation on the original platform initially, and do not let pressure determine your next step. A legitimate opportunity can withstand a request for independent confirmation.
Use this short pause before replying in detail:
- Did I apply for this exact role, or did the contact arrive unexpectedly?
- Is the person asking me to leave the platform immediately?
- Are they requesting identity, banking, or payment information before a legitimate interview or hiring decision?
- Are they creating urgency by saying I must respond, pay, or complete a task right away?
- Can I verify the employer and role without relying on the links or phone number in the message?
Do not click through the message and assume that a polished logo, familiar company name, or professional writing proves authenticity. Record the sender’s name, stated employer, role title, message date, and any contact details. You will use those details in the next stage, where verification must happen independently.
Use an independent verification sequence
Verification works best as a sequence rather than a single search. The goal is to confirm that the employer exists, the role is real, and the person contacting you is plausibly connected to the hiring process. LinkedIn reports that 47% of job seekers check the employer’s own careers site and 57% search for the company or role online. Those checks are useful starting points, but they should be performed independently rather than through the recruiter’s message.
- Open a new browser window and find the employer’s official website yourself. Do not depend on a careers link supplied in an unsolicited message.
- Search the official careers section for the exact job title, location, employment type, and description. A similar title is not the same as confirmation of the exact role.
- Compare the contact’s name and claimed department with information available through the employer’s official channels or professional profile. Look for a coherent work history and a profile that matches the stated role; treat a profile as a lead to investigate, not conclusive proof.
- Check whether the platform provides verification information or badges, when available. A badge can add context, but it should not replace confirmation through the employer’s official careers site.
- Contact the employer through contact information you found independently. Ask whether the role and recruiter are part of the company’s hiring process. Do not use only the phone number, email address, or link supplied by the unsolicited contact.
- Keep early conversations on the original platform until these checks are complete. Save the job posting and correspondence so you can compare details if the story changes.
If the exact role is absent from the employer’s official careers page, pause. That absence does not by itself prove a scam, because postings can change, but it means you need direct confirmation before proceeding. Ask the supposed recruiter to explain the discrepancy without sharing sensitive information. If they refuse independent confirmation or respond with more urgency, stop.
You can also compare the message with the employer’s normal hiring information and prepare professionally without exposing yourself. For examples of standard application materials, review CreateCV.io’s resume examples and cover letter examples. A polished resume or cover letter helps you apply through a confirmed channel; it does not make an unverified recruiter trustworthy.
Protect personal information until the process is real
A hiring process may eventually require documentation, but timing matters. The FTC warns that job scammers can imitate major employers, move quickly, and request Social Security numbers, driver’s-license details, or bank information before a legitimate interview or hiring decision. Do not provide those details merely because a message uses a company name or says an offer is waiting.
Separate ordinary application materials from high-risk identity and financial data. A resume can contain contact and work-history information, but avoid adding information that is not needed for the application. Do not send a Social Security number, driver’s-license details, bank information, or other sensitive identity data until you have independently confirmed the employer and reached an appropriate stage of hiring.
A practical data-sharing rule
Before sharing any sensitive information, require three answers: Who is the employer? Is the exact role confirmed through an independent channel? Why is this information needed at this stage? If you cannot answer all three, wait. You can use a simple script such as: “I’m happy to provide required documentation through the employer’s verified hiring process. Please direct me to the official careers or onboarding channel so I can confirm the request independently.”
Be especially cautious when a contact asks you to upload identity documents to an unfamiliar site, send them through an informal chat, or provide banking details before a confirmed hiring decision. Do not allow a promised start date, remote-work arrangement, or unusually fast offer to override your normal privacy safeguards. If the person becomes hostile when you ask reasonable questions, end the conversation.
Treat payment and task requests as stop signals
Never pay to obtain a job or to receive supposed earnings. The FTC warns about deposits, cryptocurrency payments, product-boosting schemes, and pay-to-get-paid arrangements. Task scams may present simple online activities as work, show supposed earnings, and then require you to deposit money or use cryptocurrency to continue or withdraw funds. The presence of a dashboard or displayed balance does not turn the arrangement into legitimate employment.
Stop before paying for any of the following:
- A registration, application, training, or background-check fee required to access the job.
- Equipment that must be purchased through a questionable process or from a specified seller.
- A deposit to unlock tasks, increase earnings, verify an account, or withdraw a balance.
- Cryptocurrency, gift cards, wire transfers, or another payment requested as part of hiring.
- A product-boosting or rating task that requires you to put in your own money.
A request for payment changes the decision from “verify further” to “stop and preserve evidence.” Do not send a small amount just to test the process. Do not accept a check and send part of it elsewhere. Instead, save the instructions, payment details, wallet address, receipts, and messages, then begin the incident-response steps below.
If you shared information or sent money
A mistake does not mean you should continue communicating with the sender. Move quickly, document what happened, and use official channels. USA.gov provides a guided reporting tool that helps identify where to report a scam based on your location, scam category, and incident details. You can start with its scam reporting tool.
If you shared identity or financial information, explain exactly what was exposed when contacting the relevant provider or reporting channel. Keep a timeline: first contact, verification attempts, information shared, payment made, and actions taken. This makes it easier to describe the incident accurately and prevents important details from being lost.
The best protection is a repeatable pause. Verify the employer independently, confirm the exact role, inspect the recruiter’s professional presence, keep early conversations on-platform, protect sensitive information, and refuse payment or task deposits. If a supposed opportunity cannot survive those basic checks, it is not ready for your personal data.