Recruitment phishing scams: how to spot a fake recruiter
/ Finding a Job, What's New! / By

Getting contacted by a recruiter can be exciting, especially when you’re looking for your next opportunity. But how can you tell if the person contacting you is genuine?

Recruitment phishing scams involve fraudsters pretending to be recruiters, recruitment agencies or employers. They may try to persuade you to click a suspicious link, share personal information or even send money.
The good news is there are usually warning signs. Here’s how to spot a fake recruiter and stay safe during your job search.

What is a recruitment phishing scam?

Recruitment phishing is when a scammer pretends to represent a genuine employer or recruiter to gain your trust.
They might contact you by email, text, WhatsApp or social media with what appears to be a genuine job opportunity. The message could ask you to view a vacancy, arrange an interview, upload your CV or provide information to progress an application.
The important thing is to take a moment and check who you’re dealing with before clicking links or sharing information.

1. Check the recruiter’s email address

Don’t rely on the sender’s name or company logo alone. Look closely at the actual email address.
Watch out for:
  • Misspelt company or domain names
  • Extra letters, numbers or unusual characters
  • Personal email accounts where you’d expect a company address
  • Email domains that don’t match the employer or recruitment agency
  • Vague or inconsistent email signatures
Some fake email addresses can look very similar to the real thing, so even a small spelling difference can matter.
If you’re unsure, search for the employer or recruitment agency yourself and find their official contact details independently.

2. Think before clicking a link

A recruitment phishing message may contain a link that takes you to a fake or malicious website.
You could be asked to:
  • View a job description
  • Book an interview
  • Sign in to an account
  • Complete an application
  • Upload your CV
  • Verify your identity
  • Download a document
A message looking professional doesn’t mean the link is genuine.
If the message claims to be from an employer you recognise, consider visiting the company’s official website or careers page directly instead of following the link in the message.

3. Be careful with your personal information

There will be points during a genuine recruitment process when an employer needs information about you. However, think carefully about what you’re being asked for, why it’s needed and who you’re giving it to.
Be particularly suspicious of unexpected requests for:
  • Online banking passwords
  • Credit or debit card details
  • PINs or security codes
  • Account passwords
  • One-time authentication codes
Information such as bank details for payroll or documents proving your right to work may legitimately be required later in the recruitment process. Only provide these when you’re confident you’re dealing with the genuine employer and understand why they’re being requested.

4. Be wary if you’re asked to pay money

A request to send money should set alarm bells ringing.
A fake recruiter might claim you need to pay upfront for:
  • Equipment
  • Training
  • Background checks
  • Administration
  • Software
  • Work-from-home equipment
  • Visa or processing costs
They might even promise to reimburse you after you start the job.
If you’re asked to send money as part of an unexpected recruitment process, stop and verify the employer independently before going any further.

5. Don’t let urgency rush you

Phishing scams often try to create a sense of urgency, encouraging you to act before you’ve had time to think.
Watch out for phrases such as:
  • “Respond immediately”
  • “Your offer expires today”
  • “We need your details now”
  • “Pay now to secure your position”
  • “There are only a few vacancies left”
It’s understandable to want to move quickly when you’ve found a promising job opportunity. But taking a few minutes to check the details could save you a much bigger headache later.

6. Check that the employer and vacancy are genuine

Been contacted about a job you don’t remember applying for? Time for a wee bit of detective work.
Search for the company independently and visit its official website.
Check its careers page and trusted job boards to see whether the vacancy exists. You can also check the organisation’s official social media profiles and LinkedIn presence.
If you’re still not convinced, contact the company using details published on its official website.
Avoid using the phone number, email address or links supplied in the suspicious message to verify whether it’s genuine.

7. Question job offers that seem too good to be true

A cracking job opportunity landing in your inbox isn’t automatically a scam.
But if the offer seems unusually generous and you’ve spotted other warning signs, take a closer look.
Be careful if you’re offered:
  • Exceptionally high pay for straightforward work
  • Large earnings for very few hours
  • An immediate start with little information about the role
  • A job without a proper application or interview
  • Guaranteed income with vague responsibilities
  • Work that involves receiving or transferring money
Think about the normal recruitment process. If someone is prepared to offer you a job without establishing your skills, experience or suitability, it’s reasonable to ask why.

8. Watch out for fake recruiter messages on WhatsApp and social media

Recruitment doesn’t just take place over email.
Genuine recruiters may contact candidates through LinkedIn, WhatsApp, text messages and other platforms. Unfortunately, scammers can use exactly the same channels.
Don’t assume someone is genuine simply because they know your name, job title or phone number. Some of this information may already be publicly available.
If someone contacts you unexpectedly, verify the recruiter and the company they claim to represent before sharing further information.

Remember to STOP

Received a recruitment message that doesn’t feel quite right? Remember STOP.
S: Sender
Check who is really contacting you.
T: Too good to be true
Does the job opportunity actually make sense?
O: Outbound links
Think before clicking a link or downloading a file.
P: Personal information
Consider what you’re being asked to share and why.
If you’re still unsure, stop.
Don’t click the link, don’t send money and don’t provide sensitive information until you’ve independently checked who you’re dealing with.

What should you do if you receive a recruitment scam?

If you think you’ve received a fake recruitment message and haven’t interacted with it, avoid clicking links or downloading attachments. Block or report the sender where appropriate.
If you’ve already clicked a suspicious link or shared login information, change affected passwords straight away. If you’ve shared financial information or sent money, contact your bank as soon as possible.
Most importantly, don’t beat yourself up. Recruitment scams are designed to look convincing, and fraudsters may impersonate genuine companies and recruiters to gain your trust.
Taking a moment to check before you click, reply or share information can help keep your job search safe.

More advice for a safe job search

Scammers don’t only use phishing messages. Fake job adverts and other recruitment scams can also target people looking for work.
Read our guide to spotting and avoiding scam job adverts in Scotland for more warning signs and practical advice.
You can also read our wider guide to spotting a scam for more information on keeping yourself safe.