Searching for a job at any time is stressful, but today’s job market is particularly taxing. According to a recent report from outplacement firm Challenger, Gray, and Christmas, US employers eliminated 108,000 jobs in January. Not surprisingly, AI is responsible for a not-insignificant portion (7%) of those job losses, with 22,000 in the tech sector alone.
It’s no surprise, then, that people are flooding job search platforms with resumes and applications. Unfortunately, the only replies some are getting are phishing attempts and fake job offers from online scammers. Let’s talk about how these scams work, and what you can do to avoid them during the job hunt.
AI Helps Scammers Succeed on Job Platforms
Here’s how the grift works: Criminals will use AI tools to quickly create fake websites, sometimes using stolen graphics to add legitimacy. The scammers post links to these phishing sites on well-known job-seeking platforms, such as Indeed and LinkedIn. Job seekers will upload their resumes or fill out forms on fake websites with key information such as addresses, phone numbers, Social Security numbers, and employment history. The scammers abscond with all of that data, and the job post disappears. The job applicant may never find out if they were scammed out of their data or if the company simply ghosted them during the hiring process.
According to the FBI, scammers sometimes contact victims and ask them to pay up-front for background checks, job training, or “supplies” like a work laptop or smartphone for which they promise you’ll be reimbursed. Once the crooks get the money, they disappear.
Some scammers may even send you a fake check for the purchase in exchange for your banking information. You try to deposit the check, and it bounces. Meanwhile, the scammers have your account information.
Avoid These Job Posting Red Flags
Searching for a new job makes you inherently vulnerable to identity theft scams. It starts with the application. You have to give up all kinds of personal information on your resume, cover letter, or via a web form, and that’s all done without any human contact. Unless explicitly stated in the company’s privacy policy or terms of service, you don’t know where your job application information is going, who is viewing it, or how that information will be stored or used.
On top of that, desperation can cause people to do drastic things with disastrous consequences, such as giving money to a stranger for more information about a new job or entering their Social Security number and financial account information on unsecured web forms. Let’s take a moment to examine the red flags you may encounter while job searching online:
Stay Wary of Cold Contacts
According to a LinkedIn spokesperson, scammers on the platform are five times more likely to contact victims outside their networks. If you receive a message offering you a dream job from a person you’ve never met or heard of before, keep your guard up. Scammers often offer people excellent-sounding opportunities, then send them phishing links when it’s time to apply.
Never Follow a Scammer to a Second Location
The spokesperson also told me that according to LinkedIn’s internal research, online scammers are twice as likely to lure victims into off-platform conversations. In other words, if a person you don’t know contacts you on LinkedIn or another platform and asks you to call them on the phone, or sends a link to continue the conversation on a different platform, like a messaging app, politely decline or ghost the conversation, because you’re encountering a major red flag.
Professionalism Matters Online, Too
According to LinkedIn, scammers often send unsolicited messages to job seekers using casual, unprofessional, or vague language to describe jobs that are too good to be true or not a realistic fit for the victim. For example, a person outside my LinkedIn network recently sent me a message offering me a position with duties appropriate for a solid summer internship, and the salary was 4x what I make at my current job. I did not respond.
Does This Company or Person Exist?
It’s incredibly easy to fill a profile with AI-generated text and photos these days. According to LinkedIn’s research, scammers often create fake profiles to gain victims’ trust. Before you accept a new contact request on a job-searching site like LinkedIn, ask yourself the following: Is this person someone I’ve met and worked with in the past? Are they connected to other people I know, trust, and have met in person before? Is this person’s profile activity recent?
On LinkedIn, a verification badge indicates that the person or company has been confirmed independently by the platform. Scammers often have unverified profiles.
Get Our Best Stories!
Stay Safe With the Latest Security News and Updates
By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy
Policy.
Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
If the profile appears legitimate, it’s time to research the company the person is representing. Does the company actually exist? Do they have an office location or even a phone number you can call to verify that it does? Does the recruiter or hiring manager work for that company? Is the company publicly hiring for this job? Verify this information on the company’s website and confirm that the company is present on other social platforms. Does the job posting link to a secure web address that starts with https://? Hover your mouse over the link to reveal the true URL.
Recommended by Our Editors
Is This a Real Job Post?
Okay, say the company and the person contacting you appear to be legitimate. It’s not time to breathe a sigh of relief yet. Next, you need to make sure the job you’re being offered exists. If you found the job posting on a third-party job board such as Indeed, Flexjobs, or LinkedIn, check whether that job is listed on the company’s website. Not every employer hosts a page with job postings, but many do. If you don’t see a position listed there that you saw elsewhere, treat it as a red flag and keep looking.
If They Ask for Money, Run
Scammers may ask for money or bank account information during the interview or even during the initial messaging stage. A legitimate employer will never ask for your banking details until you’ve signed a contract and are setting up direct deposit. Even then, they’ll ask to verify only the bank name, account number, and routing number or SWIFT code—but never your online banking username and password.
As Office Opportunities Disappear, Underworld Alternatives Emerge
Unfortunately, crime is one of the only entry-level tech jobs that still pays well. So, in addition to watching out for fake job posts and messages from people who don’t exist, you’ll also need to weed out job offers that involve illegal activities, too. According to a November report from Kaspersky, a Russia-based cybersecurity firm, resumes from teenagers and young adults are appearing on dark web forums. Some of the available positions have familiar titles, like penetration testers and developers, and are advertised as jobs at legitimate corporations on platforms like Telegram or smaller job search platforms.
Kaspersky’s data revealed that 69% of job seekers on the dark web didn’t specify what job they’re looking for, opening the door to offers for openly illegal jobs such as money laundering, scam call-center work, or the development of attack tools. High-impact skills, like reverse engineering and penetration testing, command the highest salaries on the shadow job market, averaging $5,000 and $4,000 per month, respectively. If you’re curious about trawling the dark web job forums for yourself, I don’t recommend it. Illegal stuff aside, just navigating the dark web can be more trouble than it’s worth.
Trust Your Intuition
Remember, if a job posting doesn’t seem to be on the up-and-up, take time to research the company, recruiter, or hiring manager online. A few minutes of searching for more information about a dream job opportunity can save you from a nightmare of future credit woes.
If your job search leads to becoming a scam victim before you become an employee, don’t panic! First, report the scammer. Law enforcement may not be able to offer immediate relief, but reporting scams helps prevent long-term online crime. If you’re a victim of identity theft, PCMag has a guide for what to do after you’ve been hacked. When you’re ready to beef up your data privacy and protection, check out our advice to avoid excessive data collection.
About Our Expert
Kim Key
Senior Writer, Security
Experience
I review privacy tools like hardware security keys, password managers, private messaging apps, and ad-blocking software. I also report on online scams and offer advice to families and individuals about staying safe on the internet. Before joining PCMag, I wrote about tech and video games for CNN, Fanbyte, Mashable, The New York Times, and TechRadar. I also worked at CNN International, where I did field producing and reporting on sports that are popular with worldwide audiences.
In addition to the categories below, I exclusively cover ad blockers, authenticator apps, hardware security keys, and private messaging apps.
Read Full Bio
