“A Recruiter Found Me”: How to Tell a Real Job Offer from a Scam

A job offer can arrive anywhere: on Telegram, WhatsApp, LinkedIn, or by email. It can happen when you have applied for a vacancy yourself - or even when you have not, but perhaps you once spoke to someone in the field, exchanged messages, or simply left your résumé on some job-search website.

After all, miracles happen, right? And most likely, you really are a strong specialist and an experienced professional whom a company might want to hire. But do not rush to celebrate - something may be off here, and first you need to check.

How Recruiting Became a Convenient Cover for Scams

The thing is, in recent years the labor market has become convenient territory for scammers. According to the U.S. Federal Trade Commission, complaints about "task scams" - schemes where a person is made to perform work for free, which we will explain a little later - rose from 5,000 recorded cases in 2023 to 20,000 in just the first half of 2024. According to Business Insider, U.S. consumer losses from this kind of fraud also increased from $90 million in 2020 to $501 million in 2024. This is precisely why LinkedIn strengthened its protections in 2025 and began requiring verification from users with recruiter and executive titles, because fake "HR" accounts have become a real plague.

Modern hiring itself has become fast, fragmented, and fairly informal. Just a couple of years ago, a message from a personal email address instead of a corporate one would have looked strange, but now candidates can be contacted directly through private messages. The market for online communication apps has also become much more diverse, so you may simply not have the program on your computer that a particular company prefers for calls. So what if they ask you to download it? Work formats have changed too: some companies issue and monitor assignments through Google Docs, others through cloud storage. In short, the work process itself has become more complicated, recruiting has too, and this has created many gaps and openings that a scammer can dive into, disguise themselves, and hide in - because in such a maze, they become much harder to notice and find.

On top of that, candidates are often in a vulnerable position. Someone urgently needs a job after being laid off. Someone has spent months unable to get past the first interview. Someone wants to enter the international market, change fields, leave a toxic team, find remote work, and finally increase their salary. In this state, an offer saying "we are looking for exactly someone like you" feels like a divine blessing. And a hungry mouse is much more easily tempted by a piece of cheese - and therefore much more likely to end up in a trap.

Scammers often sell you your own hopes and emotions in the form of "you have been chosen, everything is almost decided, only a couple of steps remain." That is why it can be so difficult to switch your brain back on in time and allow yourself to be disappointed.

Add artificial intelligence to this, and the picture becomes even more unpleasant. A fake email can now look flawless, because AI can copy almost any format and style and even generate a photo with a signature. A fake recruiter can correspond in perfectly normal business language. A fake company website can look better than the websites of some real employers. All of this only increases the risk of falling for a scam. So how can you actually tell fake recruiting from the real thing?

Types of Recruiting Scams and How Not to Fall for Them

1. The Bait Vacancy with Perfect Conditions

The most familiar scheme begins with an offer that looks suspiciously pleasant: remote work, high income, a flexible schedule, minimal experience, and "simple tasks." For example, you may be asked to rate products, like posts, check data, write short reviews, help "optimize" orders or apps. At first, the deception may not be visible at all: they communicate politely, explain the process, show you a personal account, give you test access, and sometimes even credit small amounts of money to create the impression of real work.

Everything looks almost plausible - right up until the moment you realize that the job seems to exist only inside this strange system, while there is still no clear employer, team, product, or proper contract.

The main trap here is the too-good ratio between effort and money. If you are promised an income for a couple of hours a day that does not match the market or your experience, this is not luck - it is a reason to stop. Real employers pay for results, skills, time, and responsibility, not for "simple actions" that, for some reason, no one else before you wanted to perform for good money.

Assess the offer soberly and always ask "why?" Why did they choose you specifically? Why did they not find someone internally, someone with more experience, or someone cheaper? Why such a high amount for such simple tasks? Why does the vacancy look like a gift from fate, yet no one can give you a normal answer about the company, the role, or the real value of your work? If the answers are vague, what you are looking at is most likely not an opportunity, but bait.

2. A Fake Recruiter Acting on Behalf of a Real Company

A scammer may introduce themselves as an employee of a well-known brand, agency, or international startup - perhaps even one you have tried to contact. Their profile may include a logo, the title "Talent Acquisition," a pleasant photo, several posts, and sometimes even a normal-looking list of contacts. Then the polite exchange begins: "we found your profile," "your experience is a good fit," "we would like to discuss the role."

Everything looks almost like ordinary recruiting, except for small inconsistencies: a strange email domain, a move to a personal messenger for no clear reason, no vacancy on the company website, evasive answers about the team and manager.

If a "company employee" writes to you, do not limit yourself to admiring the profile. Check whether this person is listed on the employer's website, whether the email and physical addresses match, whether the vacancy exists in the official Careers section, and whether you can contact the company through an official channel to confirm that recruitment for your role is really underway. Do not hesitate to call and ask whether a person with that name works at the company and whether you should trust them.

3. An Interview That Is Actually Collecting Your Data

They conduct a short interview with you, ask about your experience, send you a form, and talk about onboarding. Then, far too early, they ask for your passport, address, tax number, bank details, a photo of your document, a selfie with your document, your date of birth, card details, or "information for payroll." The candidate naturally thinks: they have almost hired me, so this must be normal - they need it for salary payments or paperwork. Sure, of course.

The FTC explicitly warns that recruiting scammers sometimes want not your money directly, but your personal information, which they can then use to:

a) take out a loan,

b) hack your banking app, or

c) build a more elaborate and personalized scam that you will be even more likely to fall for.

A real employer may also request documents, yes, but this usually happens after a clear process, an official offer, and through secure channels. If documents are demanded before a proper interview, before a clear contract, or through a strange form in a messenger, this is not "they are just in a hurry and want to hire me quickly." It is a red flag the size of a billboard.

4. A Test Assignment That Is Actually Free Work

We mentioned this scheme at the very beginning. The candidate is given a "small task": write a strategy, compile a database, prepare a design, conduct research, come up with a content plan, analyze an ad account, or suggest improvements for a real product. It sounds like a skills test, but in reality the person performs a piece of work that can later be used without formal hiring or payment.

A proper test assignment checks a skill; it does not solve a company's business task. It has a clear scope, a time limit - not in the sense of "do this by such-and-such a date," but in the sense that it should take no more than 15-30 minutes - anonymized or educational material, and clear assessment criteria.

If you are asked to create a full three-month strategy, redesign a real landing page, provide a list of potential clients, or conduct a detailed analysis of someone else's business "just to see your thought process," it is worth slowing down. It is a different matter if the company pays for your work. If you have doubts, ask in advance how the test assignment will be used later, and say that you are willing to provide one-third of it, which should already show whether you can handle the task.

Because, as we have already said, scammers do not always need your money. Sometimes they do not even need your personal data - perhaps they simply want to use you without consequences.

5. A Fake Offer Asking You to Pay for Something

The candidate is told: you have been accepted. Congratulations - all that remains is to arrange equipment, access, training, verification, insurance, work software, or courier delivery of a laptop. Sometimes they send a check that must be cashed, after which you are asked to transfer money to an "equipment supplier." Sometimes they ask you to pay the fee yourself and promise reimbursement with your first salary. In the joy of receiving an offer, a person can easily miss the oddity: why does a new job begin not with a contract, but with a payment?

Business Insider told the story of 26-year-old Amisha Dutta: she applied for a vacancy on LinkedIn, went through a fake hiring process, received a fake check for $4,300 to buy equipment, and ultimately lost money when she transferred funds to the scammers. In fact, this is a very old trick based on transferring money to a third party - only now it is wrapped in the appearance of "employee care" and a request from a businesslike company.

6. An "Interview" After Which You Are Asked to Install Software or Run Code

This is the most dangerous scheme for developers, designers, analysts, and anyone who works with digital tools. You are invited to a technical interview and sent a repository, a test environment, a "corporate app," an archive, an extension, a special browser, or a skills assessment program. Such a file may contain malicious code that steals data, crypto wallets, access credentials, or opens a path into the corporate network you are currently connected to - for example, if you are job hunting from a work laptop before leaving your old company.

The most high-profile example is the 2022 hack of Ronin Network, the blockchain behind the game Axie Infinity. According to investigations, North Korean hackers contacted a Sky Mavis engineer through LinkedIn while posing as recruiters, held several "interviews" with him, and then sent a fake offer in a PDF file. The employee opened the file on a work computer, and this became the entry point for the attack, after which around $625 million was stolen from Ronin Network.

So sometimes a recruiting scam is not merely a personal risk for the candidate, but a threat to an entire corporation. In 2025, Google Cloud also described a North Korean campaign in which attackers used the job application and interview process - especially against developers in the crypto and technology sectors - to steal data and gain access to their systems.

Digital Hygiene for Candidates: How Not to Become an Easy Target

1. Check the Recruiter as Carefully as They Check You

Look at the profile, activity history, connections, company, and email domain. If someone writes on behalf of a major brand, the vacancy should appear on the official website or at least be confirmed through an official channel. A good, simple move is to contact the company directly through its website and ask whether this employee is really conducting this hiring process.

Forget the idea that this is awkward. It will be much more awkward later to lose all your savings and explain to the bank why you sent your passport and card details to an "HR manager" from a messenger.

2. Do Not Hand Over Documents at an Early Stage

Passport details, tax information, address, banking details, document photos, and selfies with documents normally appear closer to the formal onboarding stage, not in the first exchange. If you are told, "this is needed for a preliminary check," "this will make things faster," or "otherwise we cannot reserve your place," stop.

A place at a company is not reserved with your passport. A serious employer can explain why the data is needed and where it will be stored, and they can always wait and understand your concerns.

3. Do Not Pay for the Opportunity to Work

Any request to transfer money before starting work should sound like a siren. Training, uniform, paperwork, verification, platform access, a deposit, a salary withdrawal fee, laptop delivery - scammers can call the payment anything they like. The meaning is the same: you are being forced to pay for the promise of future income.

In a normal employment setup, money flows from the employer to the employee, not the other way around. And think about it: why would they need to hire anyone at all if they can make money from dozens of such "new hires" - which, in fact, is exactly what they do?

4. Do Not Download "Interview Tools" You Do Not Trust

This is especially important if you are a developer, crypto specialist, designer, analyst, or someone who works with access credentials. Do not run archives, scripts, suspicious repositories, extensions, or apps on your main work computer.

If a test assignment requires code, an environment, or installation, check the source, repository, dependencies, domains, and company. For suspicious files, it is better to use a separate isolated environment - or better yet, suggest using a service that is convenient for you. If the recruiter refuses to accommodate this, it is a reason to stop communicating.

5. Beware of Urgency

Scammers love phrases like "it has to be today," "the position will be gone," "reply within an hour," "onboarding is only available now," or "this is a confidential vacancy, so there are few details." Urgency is used so you do not have time to check.

Real hiring processes can also move quickly, but a normal company will not collapse because a candidate takes time to verify an email, domain, contract, or terms.

6. Separate a Good Test Assignment from Free Work

A proper test assignment checks one or two skills and does not require you to produce a full working result. If the task is too large, ask to limit it, pay for it, or explain how it will be assessed. For creative, marketing, analytical, and product roles, you can immediately suggest an alternative: a portfolio, an old case study, a fragment of a solution, or a short discussion on a call.

7. Keep Your Job-Search Funnel in One Place

This is boring and will take extra time, but it can save you at the most important moment. Keep a spreadsheet or notes: where you applied, who contacted you, from which email address, for which vacancy, what stage the process is at, and which documents you have sent.

It is easier for scammers to confuse someone who no longer remembers where they left their résumé. This is especially true if you are actively job hunting and sending dozens of applications per week. That is exactly what scammers exploit when they mention some website "that you probably just forgot about." Do not let anyone make you doubt what is real, what happened, and what you did or did not do. Recording everything down to the details is the best protection.

Signals After Which It Is Better to Pause the Hiring Conversation

• You are offered significantly more than the market rate for suspiciously simple tasks.

• The recruiter cannot clearly explain what the team does or who you will report to.

• All communication happens only in a messenger, and for some reason a live conversation is not considered.

• The email address does not match the company domain or contains small differences in characters, final letters, or underscores.

• The vacancy cannot be found on the employer's official website.

• The offer arrives too quickly, without a proper interview.

• You are asked to pay, make a deposit, or buy equipment from a "supplier."

• Documents are required before an official offer.

• The test assignment requires more than one or two hours of work.

• You are asked to download a file, install an app, or run code from a suspicious source.

• Questions are answered evasively, while you are constantly rushed.

A message from a recruiter can still be good news and a pleasant surprise. But unfortunately, in our world, nothing should be taken on faith simply because it is beautifully presented and promises the career opportunity you have long dreamed of.

In 2026, a good candidate is not only someone with experience and a strong résumé, but also someone who knows how to protect their data, their time, and their truly valuable skills from those who have learned to convincingly pretend to be "the last hope."