A convincing job message can still be fraudulent. A familiar logo, a polished document or a profile with many connections is not proof of an employer's identity. The safest response to an unexpected opportunity is not immediate trust or panic: pause, verify through an independent channel and limit what you share. No checklist can detect every scam.
Pause: pressure is a reason to slow down
Be cautious when an offer promises unusually easy money, avoids meaningful questions about your skills or demands an immediate decision. A message that moves you quickly to a private chat service is not automatically a scam, but it becomes more concerning when the sender refuses to provide verifiable company details or a normal recruitment process.
- You are asked to pay the recruiter to unlock an interview, release salary or secure a guaranteed position.
- You are told to receive and forward money, buy cryptocurrency or use your personal bank account for company transactions.
- A cheque or transfer is followed by instructions to send part of the money elsewhere or buy equipment from a specified seller.
- The sender asks for passwords, one-time security codes, remote access to your device or an application from an unverified download link.
Treat these as stop-and-verify signals. Do not test whether a suspicious money-transfer arrangement is legitimate by sending a small amount. Funds appearing in an account do not necessarily mean that a payment is final or safe to forward.
Verify: leave the message and find a separate route
Locate the employer's website independently rather than following the message's links. Look for the vacancy on the employer's own careers page. Contact the company through a number or address you obtained independently and ask whether the recruiter and role are genuine. A real company's existence does not prove that the person contacting you represents it.
Check the full email domain for misspellings or extra words, but do not rely on the display name or an apparent company address alone. Accounts can be impersonated or compromised. A secure connection or padlock protects the connection; it does not establish that the site's business is trustworthy.
If a recruiter claims to act for an agency, independently check the agency and any registration or licensing requirements relevant to that location. Requirements differ, and finding no search result is not a complete investigation. If important claims remain unverifiable, stop the conversation rather than letting urgency decide for you.
Protect: share information in stages
An initial application usually needs career and contact information, not unrestricted access to your financial or identity records. Legitimate employers may need identity, work-eligibility or payroll information at an appropriate stage. Before sending it, verify the recipient, understand the purpose and use an agreed secure channel.
- Do not send passwords, security codes or bank-login credentials to a recruiter.
- Avoid putting identity numbers and unnecessary address details on a public CV.
- Do not install remote-access software or disable device protections for a supposed interview.
- Do not upload confidential work samples or documents belonging to another person.
Where a genuine government application or professional licence has a fee, verify it directly with the official authority and pay only through its legitimate process. Do not treat a recruiter's demand for payment as equivalent to an official fee, or assume that paying guarantees eligibility, a visa or a job.
Decision card: a plausible offer with a payment request
Imagine a sender uses a real employer's name and offers a remote role, then asks you to buy equipment from a specific website before your first day. Do not proceed because the offer letter looks professional. Verify the vacancy and purchasing arrangement with the employer through independently sourced contact details. Do not send payment or identity documents while that check is unresolved. This is a fictional scenario, not an allegation about a named company.
If you already clicked, paid or shared information
Stop further contact and do not send more money to recover the first payment. If money or card details are involved, contact your bank or payment provider promptly through its official channel and describe what happened. Ask what protective or recovery steps are available; recovery is not guaranteed.
If a password was exposed, change it from a trusted device, change reused passwords and review account sessions and security settings. If you installed suspicious software, stop using that device for sensitive activity and seek trusted technical assistance. If identity documents were shared, contact the relevant issuing authority or local identity-theft support service for jurisdiction-specific guidance.
Preserve the messages, sender details, vacancy URL and payment references before blocking or reporting, without opening suspicious attachments again. Report the account or listing to the platform and use your local police or official fraud-reporting channel where appropriate. Keep reports factual and do not publish your own sensitive documents as evidence.
Your final checkpoint
A trustworthy opportunity should withstand a reasonable identity check. If you cannot independently confirm who is hiring, what the role is and why information or money is being requested, pause the process. Missing a pressured deadline is safer than letting an unverified sender control your next step.