Blog/Social engineering

Fake Job Offers: Recruitment Scams That Borrow Real Company Names

Job seekers are targeted with offers that look real, from companies that are real, for jobs that do not exist. Here is how recruitment scams work, the red flags, and what employers can do when their name is used.

CyberWatch AI27 September 2026 · 2 min read
Close-up of hands typing on a laptop keyboard

Few messages are as welcome as a job offer. That is exactly why scammers send them. Recruitment fraud targets people at a hopeful and sometimes anxious moment, and it increasingly uses the names, logos and even staff names of real, respected companies.

How recruitment scams work

It usually starts with a message on a job site, LinkedIn, WhatsApp or email: your CV has been shortlisted for a well-paid role, often remote, with a quick start. There may be a short "interview" by text chat. Then, surprisingly quickly, you are offered the job.

Then comes the catch. It takes one of a few forms:

  • A fee. For training, equipment, a work permit, a background check or a "processing" charge, to be paid before you start.
  • Your details. Copies of your ID, bank details and personal information "for onboarding", later used for identity fraud.
  • A cheque scam. You are sent a cheque or transfer for equipment, told to forward part of it to a supplier, and the original payment later bounces.
  • Task scams. Paid to like videos or rate products, you earn small amounts at first, then are asked to deposit money to unlock bigger tasks and your "earnings".

The golden rule: a genuine employer never asks you to pay to get a job. Any request for money, however it is described, is a red flag.

Red flags for job seekers

  • An offer for a job you did not apply for, or after almost no interview
  • Pay that is unusually high for the work described
  • Communication only by WhatsApp, Telegram or a personal email address
  • A recruiter's email domain that does not match the company's real website
  • Pressure to accept or pay quickly
  • Requests for ID or bank details before a formal, written contract

How to check an offer

  1. Find the company's official website yourself and check the job is listed on its careers page.
  2. Contact the company through its official channels to confirm the recruiter works there.
  3. Check that emails come from the company's real domain.
  4. Paste the message into CyberWatch AI Scan, which is free, to see what looks suspicious.

When scammers use your company's name

For employers, fake recruitment in your name damages your reputation and hurts people who trusted your brand. Practical steps help:

  • State clearly on your careers page that you never charge candidates and only recruit through listed channels and your own email domain.
  • Make it easy to report suspected fake offers to you, and respond quickly.
  • Report fake profiles and adverts to the platforms hosting them.
  • Brief your HR team, who may receive calls from confused applicants and are also targeted by fake "candidates" sending malicious attachments disguised as CVs.

HR is a target too: a CV is an attachment from a stranger that HR staff are expected to open. Make sure CVs are opened with appropriate protections, and that HR knows to report anything that asks them to enable macros or download extra files.

Where CyberWatch AI fits

CyberWatch AI helps organizations train staff, including HR and recruitment teams, on the scams that target their roles, and lets anyone check a suspicious message before acting on it. The scanner is free for anyone to use, including job seekers who want a second opinion on an offer.

Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.