The Recruiter Is Real. The Company Is Real. The Job Might Even Be Real. You Can Still Be Getting Scammed.
Her name is real.
You checked.
She works in Talent Acquisition for the company.
Her LinkedIn profile has years of activity, hundreds of connections and employees commenting on her posts.
The company is real.
The website is real.
You Google the job title.
That looks real too.
So when "she" emails you about an interview, what exactly are you supposed to verify?
Her?
You already did.
Except you verified that the person exists.
You did not verify that the person contacting you is that person.
That distinction has become increasingly important for job seekers.
The Federal Trade Commission warned again in April 2026 about fake recruiters claiming to represent recognizable companies while offering remote jobs through unsolicited messages.
The newest version can begin with something almost laughably small:
Reply YES if interested.
Then the process moves.
A conversation.
A supposed recruiter.
Maybe an interview.
Maybe onboarding paperwork.
Eventually, money or sensitive information enters the picture. Consumer Advice
Meanwhile, a new 2026 analysis from the Better Business Bureau found reports of employment scams to its Scam Tracker doubled in 2025 compared with 2024. More than 23,000 employment-scam reports reached BBB during 2025 alone, and roughly half identified text messaging as the initial delivery method. Better Business Bureau
This is not the ghost-job problem we investigated earlier in the Journal.
A ghost job is generally a questionable or misleading employment advertisement associated with a real employer.
An employment scam is something else.
There may be no employment relationship at all.
The job is bait.
And the thing being recruited may actually be:
your money,
your bank information,
your Social Security number,
your identity,
or your trust.
The uncomfortable part is that modern job scams do not always look ridiculous.
Some look increasingly like hiring.
So the candidate-safety question in 2026 is no longer simply:
Does this look professional?
It is:
Can I independently verify the relationship behind what I'm seeing?
Job scams have changed dramatically
The old mental model is easy.
Terrible grammar.
Impossible salary.
Anonymous email.
"Dear Applicant."
Someone claiming you can earn $8,000 a week stuffing envelopes.
Delete.
Done.
Those scams still exist.
But judging legitimacy primarily by professionalism has become dangerous.
The FTC warned in 2025 that scammers increasingly impersonate recruiters from recognizable employers, sometimes sending professional-looking virtual-interview invitations, detailed job descriptions, benefits information and apparently legitimate employment paperwork. Consumer Advice
The FBI has separately documented schemes in which criminals create websites resembling legitimate employer sites, post fraudulent openings on real job boards and impersonate recruiters, HR employees and hiring managers during fake interviews. FBI
BBB's new 2026 report describes scammers impersonating recruiting companies, entertainment companies and other recognizable organizations. Better Business Bureau
The underlying shift is important:
The scammer no longer needs to invent a convincing company.
The internet already contains one.
A legitimate company's:
logo,
executive names,
recruiter names,
job descriptions,
benefits,
employee profiles,
brand language,
office locations,
and hiring announcements
can all be found publicly.
The scammer's job is not necessarily to invent credibility.
It is to borrow it.
And AI makes borrowed credibility cheaper
Be careful here.
There are plenty of breathless claims online that artificial intelligence has caused every employment scam to become a sophisticated deepfake operation.
The evidence does not support treating that as the norm.
Most job scams do not require deepfakes.
They require persuasion.
But generative AI does reduce the effort required to create convincing:
emails,
job descriptions,
recruiter messages,
web copy,
documents,
logos and visual assets,
and personalized communication.
BBB's 2026 employment-scam report notes that modern AI tools make fake websites, applications and other scam infrastructure easier to create, while emphasizing that many of the underlying fraud mechanics themselves are not new. Better Business Bureau
That's the useful distinction.
AI did not invent recruiter impersonation.
It can make impersonation easier to scale and harder to dismiss based on surface quality alone.
So:
"The email was written really well."
is no longer meaningful verification.
Neither is:
"The offer letter had the logo."
A logo is an image.
It is not authentication.
The numbers are large—but we need to be precise about them
This is an area where scary statistics get mashed together quickly.
So let's separate them.
The FTC reported that losses associated with job and employment agency scams increased from approximately $90 million in 2020 to $501 million in 2024.
Reports in that category tripled over the same period. Federal Trade Commission
That is verified federal complaint data.
But it is reported loss.
It is not the total economic cost of employment scams in America.
Not every victim reports.
Not every report is independently adjudicated as proven fraud.
And the FTC's broader "business and job opportunities" category is larger than employment scams alone, so those categories should not be casually substituted for one another.
BBB's 2026 analysis provides a different dataset.
Nearly 50,000 employment scams were reported to BBB Scam Tracker over three years, with reports doubling in 2025 compared with the prior year. Better Business Bureau
Again:
BBB reports are not a census of all U.S. employment scams.
FTC reports are not either.
What the two independent reporting systems do show is a consistent direction:
Employment fraud is not a fringe candidate-safety issue.
One scam is growing particularly fast because it barely resembles a job
You receive a message.
Maybe by SMS.
Maybe WhatsApp.
Someone says they have flexible online work.
You can earn money by:
rating products,
"optimizing" apps,
liking videos,
boosting content,
reviewing listings,
or completing simple online tasks.
You do a few.
A dashboard shows earnings.
Sometimes you even receive a small payment.
Now it feels real.
Then something changes.
You need to deposit money to unlock another batch of tasks.
Or pay to release your earnings.
Or cover a temporary negative balance.
Or advance to a more profitable level.
You send money.
The dashboard shows more money.
You try to withdraw it.
Now another payment is required.
This is commonly called a task scam.
The FTC reported in late 2024 that task-scam reports grew from effectively zero in 2020 to roughly 5,000 in 2023, then approximately 20,000 during just the first half of 2024. Task scams accounted for nearly 40% of job-scam reports during that period. Federal Trade Commission
BBB's 2026 update suggests the pattern continued.
It identified nearly 680 task-based employment scam reports in 2025, with a reported median loss of approximately $2,300 in its Scam Tracker dataset. Better Business Bureau
The mechanics vary.
The rule does not:
A legitimate employer does not require you to deposit your own money to unlock wages you supposedly earned.
You should never have to pay to get paid.
But the most dangerous scam may look much more like an actual career opportunity
Imagine this instead.
You apply for a legitimate-looking remote operations role.
A recruiter contacts you.
You interview.
You receive an offer letter.
Congratulations.
Now HR sends onboarding paperwork.
They need:
your address,
date of birth,
Social Security number,
banking information for direct deposit,
maybe identification documents.
Here's the problem.
Real employers eventually need some of those things.
The Internal Revenue Service notes that U.S. employers legitimately collect an employee's name and Social Security number for wage reporting, while employers must also complete employment-eligibility verification for new hires. IRS
So advice like:
"Never give an employer your Social Security number."
isn't correct.
At legitimate onboarding, you may need to.
The meaningful variables are:
when, why, how and to whom.
The FTC specifically warns about supposed recruiters requesting Social Security numbers, driver's licenses, bank details or similar sensitive information before legitimate interviewing and hiring have occurred. Consumer Advice
That is the distinction candidates need.
Not:
Never provide sensitive information.
But:
Do not provide sensitive information until you have independently verified the employer, the opportunity and the stage of the hiring relationship.
This is why a real recruiter profile proves surprisingly little
Suppose someone messages you claiming to be Sarah Patel, Senior Recruiter at Acme.
You search Sarah.
She exists.
What have you established?
Sarah Patel works at Acme.
You have not established:
The person messaging me is Sarah Patel.
Scammers can use the identity of a real employee precisely because that employee is verifiable.
This creates a verification trap.
You search the name.
Everything checks out.
You relax.
The better verification is to move outside the communication channel the stranger gave you.
Go independently to the company's official website.
Find its careers page.
Find the job.
If necessary, find the company's published contact information.
If the recruiter is publicly reachable through a separate verified channel, confirm the outreach there.
Do not verify the person using a phone number, website or email address supplied exclusively by the person whose identity you are trying to verify.
That is circular verification.
Email domains matter—but they are not magic
The FTC recommends checking whether recruiter communication comes from a legitimate corporate email account rather than a generic personal address such as Gmail or Yahoo. Consumer Advice
That remains useful.
If someone claiming to recruit for a major corporation writes from:
your suspicion should rise considerably.
But even domain checking requires attention.
Scammers can register lookalike domains.
Imagine:
versus:
or:
or:
At a glance, especially on mobile, the difference may be easy to miss.
The FBI has specifically warned about criminals creating domains visually similar to legitimate employers' websites. FBI
So do not simply look at the logo beside the email.
Look at the actual domain.
Then independently navigate to the company's real website rather than clicking the email's link.
"But the job is on a real job board"
Unfortunately, that is not enough either.
The FBI has documented fraudulent jobs appearing on legitimate online job boards. FBI
The FTC likewise warns that scammers can impersonate legitimate employers on real employment platforms. Consumer Advice
This does not mean job boards are unsafe.
It means the platform where you discovered an opportunity is one piece of evidence, not absolute proof.
If something starts feeling unusual:
Go to the employer's official careers page independently.
Search for the position there.
If the posting exists, good.
If it does not, don't immediately conclude fraud; third-party listings can remain visible after a company removes a job.
But investigate further before sharing sensitive information.
This is the same verification step we recommended in our ghost-jobs edition for a completely different reason.
There, you were trying to determine whether an opportunity was actively hiring.
Here, you are trying to determine whether the person communicating with you represents the employer at all.
Same action.
Different risk.
A real interview doesn't prove it either
This may be the most psychologically effective part of sophisticated employment fraud.
Scammers sometimes conduct interviews.
The FTC has warned that some fake hiring processes include substantial virtual interviews. Consumer Advice
The FBI has documented scammers impersonating multiple company employees during fraudulent hiring processes. FBI
Why invest that much effort?
Because process creates legitimacy.
After spending 45 minutes answering interview questions, your mental model changes.
You are no longer evaluating whether this is a scam.
You are evaluating whether you're getting the job.
That is a powerful transition.
The scammer has moved you from:
verification
into:
candidacy.
Now the offer arrives.
You're excited.
Then the onboarding request.
Then the equipment purchase.
Then the banking form.
Every previous step makes the next one feel more reasonable.
This is why candidate safety cannot rely exclusively on detecting one giant red flag.
Sometimes there isn't one.
There is a sequence of individually plausible events leading toward one dangerous request.
Urgency is doing more work than you realize
Real hiring can move quickly.
A recruiter may genuinely have a hiring manager who wants someone yesterday.
A legitimate company may schedule an interview tomorrow.
An offer can arrive quickly.
So speed alone does not prove fraud.
The question is what the speed is preventing you from doing.
If someone is pressuring you to:
send money now,
provide banking information immediately,
deposit a check today,
purchase equipment from a specified vendor,
move to an encrypted messaging platform,
provide identification before you've verified the opportunity,
or accept before you can independently confirm the employer,
the urgency becomes meaningful.
Scams benefit when you do not have time to verify.
A legitimate hiring process should survive you taking reasonable steps to establish that it exists.
The equipment check is not a generous remote-work benefit
This scheme has persisted because it fits something real employers actually do.
Remote employees need equipment.
So the fake employer says:
We'll send you money for your home office.
A check arrives.
You deposit it.
Your bank may initially show the funds as available.
The "employer" instructs you to purchase equipment—sometimes from a specific supposed vendor—or send part of the money elsewhere.
You do.
Later, the check is discovered to be fraudulent.
The money disappears.
The money you sent does not.
The FTC is unequivocal: legitimate employers will not send you a check and then instruct you to send part of that money elsewhere or purchase equipment in this manner. Consumer Advice
A bank making funds temporarily available does not mean a check has ultimately cleared as legitimate.
Do not let the appearance of money in your account authenticate the employer.
There is a very simple rule that catches a remarkable number of scams
Money should flow toward you.
You are the employee.
The employer pays you.
If the hiring process suddenly requires your money to flow toward:
the recruiter,
the company,
a vendor,
a training provider,
a cryptocurrency wallet,
a payment app,
a "task balance,"
an equipment supplier,
or a fee required to release your wages,
stop.
There are legitimate careers involving licenses, certifications, professional dues or personally owned equipment.
There are also legitimate independent-contractor arrangements with different economics from employment.
Context matters.
But an employer telling you that you must pay it or its designated intermediary to receive the job or your wages is fundamentally different.
The FTC's guidance is wonderfully uncomplicated:
Never pay to get paid or get a job. Consumer Advice
Keep that rule.
"Remote" is not the red flag
This distinction matters.
Remote work is real.
Legitimate employers recruit through text.
Legitimate recruiters use LinkedIn.
Legitimate companies conduct virtual interviews.
Legitimate onboarding happens online.
Legitimate employees provide bank information for direct deposit.
Legitimate employers collect tax and identity documentation.
If job-scam advice simply says:
Remote + text + online onboarding = scam
it becomes useless.
Modern employment uses all of those things.
The correct approach is not paranoia.
It is independent verification at the moments where risk increases.
Think of the hiring journey as containing verification gates.
Gate 1: Before you invest substantial time
Ask:
Does the organization exist?
Does the opportunity make sense?
Can I locate the employer independently?
If you found the role through a third party, check the official company careers site when possible.
You do not need a forensic investigation before sending a résumé.
Your résumé is intentionally public-facing professional information.
The verification burden should increase as the information or money requested from you becomes more sensitive.
Gate 2: When someone contacts you
Verify:
Who is communicating with me?
Check the email domain.
Search the recruiter's name independently.
Compare the role with the company's career site.
Look at the recruiter's professional history.
But remember:
A real profile proves the identity exists.
It does not authenticate the sender.
If anything feels inconsistent, confirm through a separate channel.
Gate 3: Before giving sensitive identity information
This is where verification should become much stronger.
Before providing:
Social Security number,
bank account information,
copies of identification,
tax forms,
or other sensitive onboarding data,
you should have independently verified:
the employer,
the job,
the person or system collecting the information,
and that you have actually reached legitimate onboarding.
A company asking for direct-deposit information after a verified offer through its legitimate HR system is ordinary.
A "recruiter" asking for your bank account during a WhatsApp interview is not.
Same information. Completely different context.
Gate 4: The moment anyone asks for money
Stop.
Do not send it while you investigate.
Do not let:
an approaching deadline,
an apparent account balance,
a supposed payroll problem,
a check in your bank account,
or the fear of losing the opportunity
rush you.
Contact the employer through independently verified channels.
If the opportunity disappears because you refused to send money:
good.
You have your answer.
What if the scam is so good you genuinely cannot tell?
This is where candidates need permission to be slightly awkward.
Contact the company.
Something like:
"Hi—I'm currently speaking with someone who identifies themselves as a recruiter from your organization about the [role]. Before providing onboarding information, I'd like to verify that the outreach is legitimate. Can you confirm?"
A real Talent Acquisition team should understand why you're asking.
In 2026, employers themselves have a stake in candidates verifying recruitment communications because scammers are borrowing their brands too.
You are not accusing the recruiter of fraud.
You are authenticating a high-stakes digital relationship.
We do that with banking.
We do it with healthcare.
We do it with account logins.
Employment now deserves some of the same thinking.
And employers should make themselves easier to verify
This is a candidate edition, so I'm not turning it into a TA operating manual.
But there is an obvious system issue here.
If candidates cannot distinguish legitimate recruiters from people impersonating them, employers have a role to play.
Companies can publish:
the domains recruiters use,
how candidates should expect to be contacted,
whether recruiters use WhatsApp or Telegram,
whether interviews ever occur exclusively by text,
whether the company sends equipment directly,
what information is collected before an offer,
and where suspicious outreach can be verified.
Some organizations already publish recruitment-fraud warnings.
More should.
The hiring industry's instinct is often:
Candidates need to become better at detecting scams.
Yes.
But legitimate hiring systems can also become easier to authenticate.
Those ideas belong together.
What if you already sent the information?
First:
Do not spend the next three hours insulting yourself.
Sophisticated scams work because they reproduce signals people legitimately use to establish trust.
Act.
If you sent money, contact the financial institution or payment provider immediately and ask whether the transaction can be stopped or reversed.
If you disclosed sensitive personal or financial information, the FTC directs victims to IdentityTheft.gov for a personalized recovery plan. Consumer Advice
The IRS recommends additional protections where identity information may have been compromised, including considering an Identity Protection PIN and fraud alerts depending on the circumstances. IRS
If you see an employment scam, report it to the FTC through ReportFraud.ftc.gov and report the fraudulent posting or account to the platform where you encountered it. Consumer Advice
If you gave a Social Security number or banking information, do not merely block the scammer and hope nothing happens.
Treat the information as compromised.
There is a psychological reason job scams are especially cruel
Employment is not a random product purchase.
People search for jobs when something in their lives is unresolved.
Maybe they were laid off.
Maybe they hate their current job.
Maybe their family needs more money.
Maybe they've been searching for nine months.
Maybe this is their first opportunity after graduation.
Maybe they desperately need remote work because of caregiving.
Maybe they just completed their sixth final-round rejection.
Then:
Congratulations. We'd like to offer you the position.
For someone who has been waiting months to hear those words, skepticism becomes emotionally expensive.
You want it to be true.
That is not stupidity.
It is precisely why the story works.
And scammers can exploit something legitimate employers spend enormous amounts of effort trying to create:
candidate trust.
A legitimate-looking process is not the same as a legitimate relationship
This is the larger hiring-experience lesson.
For years, candidate-safety advice relied heavily on surface cues.
Bad grammar.
Weird website.
No company information.
Suspicious recruiter.
Those signals still matter.
But the modern internet makes appearances cheap.
A professional email is cheap.
A polished PDF is cheap.
A website is cheap.
A logo is free to copy.
A real employee's name is searchable.
A job description can be copied verbatim.
An interview can be staged.
A fake offer letter can look considerably more polished than a real one.
So candidates need a different trust model.
Not:
Does this look legitimate?
But:
What independent evidence establishes that it is legitimate?
That one change in question makes a surprising amount of difference.
Trust should accumulate as the hiring process progresses
Early in a process, you know very little.
So share what is appropriate for that stage.
Résumé.
Professional history.
Contact information.
As the employer demonstrates legitimacy, you can reasonably share more.
Interview information.
References when appropriate.
Eventually, after a verified employment decision:
tax information,
identity documentation,
banking information through legitimate onboarding channels.
Trust grows alongside evidence.
That is how healthy digital relationships generally work.
A scam often tries to invert the sequence.
It asks you to provide high-trust information before it has earned high trust.
That inversion is one of the strongest signals available.
The best defense is not becoming suspicious of every recruiter
Please do not leave this article assuming every unexpected recruiter message is fraudulent.
Recruiters legitimately source candidates who never applied.
Some recruiters use text.
Some small companies have imperfect processes.
Some legitimate hiring teams move incredibly fast.
Some recruiters make typos.
Some career sites fail to update immediately.
A weird hiring process can simply be a weird hiring process.
You do not need to become afraid of opportunity.
You need a verification habit.
Verify independently before the stakes increase.
Before money.
Before banking information.
Before your Social Security number.
Before purchasing anything.
Before trusting a stranger simply because the stranger successfully proved that the company they claim to work for exists.
That is a much healthier standard than paranoia.
Because the cruelest job scam does not steal your money first
It steals the moment.
The message you have been waiting for:
We want you.
Then it uses that moment to lower your guard.
That is why candidate safety belongs inside the hiring experience.
The relationship between candidate and employer begins before either party truly knows the other.
Both sides are exchanging increasingly sensitive information.
Both sides are establishing trust.
And candidates should be able to verify that the organization asking for their trust is actually there.
So when the next recruiter appears in your inbox:
Be excited.
Take the call.
Explore the opportunity.
Ask questions.
But remember:
A real name is not authentication.
A real company is not authentication.
A real job posting is not authentication.
A professional interview is not authentication.
Trust the opportunity as the evidence earns it.
That is not cynicism.
In 2026, it is digital literacy.
SOURCES & FURTHER READING
Federal Trade Commission — “That Job Offer Text Is Probably a Scam” — April 2026.
Fresh federal warning describing recruiter impersonation, unexpected remote-job texts, fake checks and task scams. Consumer Advice
Read the FTC's 2026 job-scam warning
Federal Trade Commission — Consumer Sentinel fraud data — March 2025.
Primary federal source reporting that job and employment-agency scam reports tripled from 2020 to 2024 while reported losses rose from approximately $90 million to $501 million. Federal Trade Commission
Read the FTC fraud-data release
Federal Trade Commission — “Job Scammers Are Looking to Hire You” — July 2025.
Practical federal guidance covering employer impersonation, premature requests for sensitive information and recruiter verification. Consumer Advice
FTC job-scam guidance
Federal Trade Commission — Task Scam Data Spotlight.
Primary federal reporting documenting the extraordinary growth of task-based employment scams. Federal Trade Commission
Read the FTC task-scam analysis
Better Business Bureau — Employment Scams 2026 Update.
Current analysis of nearly 50,000 employment-scam reports over three years, including 2025 growth, text-based recruitment and task-scam patterns. Better Business Bureau
Read BBB's 2026 employment-scam report
Federal Bureau of Investigation — Fake Job Listings and Applicant PII.
Federal warning explaining how criminals spoof employer websites, place fraudulent jobs on legitimate job boards and impersonate recruiters, HR staff and hiring managers. FBI
Read the FBI's employment-scam guidance
Internal Revenue Service — Hiring Employees.
Primary federal context on information legitimate employers actually collect from employees, including Social Security numbers and employment-eligibility documentation. IRS
IRS guidance on legitimate employee information collection
Internal Revenue Service — If You Were Scammed.
Recovery guidance for people who have disclosed money or identity information to scammers. IRS
IRS scam-recovery guidance
IdentityTheft.gov — Federal Identity Theft Recovery Resource.
FTC-operated resource for creating a recovery plan after personal information has been compromised.
IdentityTheft.gov
