Job Scams

creative commons

"Job offer scams" or "employment scams" involve individuals claiming to be job applicants or organizations posing as employers.  Fake job applicants can steal corporate secrets, intellectual property, financial data, and compromise internal systems.  Bogus employers deceive job seekers into providing sensitive identity and financial data.  Personally identifiable information (PII), such as a Social Security number, bank account details, or copies of identification documents, can be used to commit  identity theft and other crimes. Scammers on both sides can send documents that download malware to the victim's computer and network. 

Job seekers should look out for:

  • Unsolicited job offers without interviews or applications. Legitimate employers typically follow a standard recruitment process.
  • Early requests for personal data (e.g., Social Security number, banking information). See  Identity Theft for details on how scammers can exploit your personally identifiable information (PII).
  • Recruiters using free email accounts like Gmail, Outlook, or Yahoo.
  • Requests for upfront payments for training, equipment, or background checks.
  • Attachments (e.g., coding challenges) that contain malware.
  • The interviewer's video is off, malformed, or has odd visual or audio artifacts.
  • Vague job descriptions or unusually high pay offers.
  • Fake checks followed by refund requests.
  • Pressure to buy tools from scam-controlled websites. Sometimes, scammers may ask you to order supplies or equipment through a site they control, charging your credit card and delivering inferior or no goods at all.  See the  Advanced Fee Fraud for more on how this scam works. 

Employers should look out for:

  • Candidate's video is off, malformed, or has AI artifacts.
  • Candidate qualifications and salary expectations are too good to be true.  
  • Resumes containing malicious attachments.
  • Applicants using false or stolen credentials.
  • Requests to update payroll or banking information.
  • Fake staffing firms submitting bogus invoices.
  • Inconsistencies in work history, such as gaps, overlapping roles, or unverifiable companies, may indicate a fraudulent application.
  • Advanced certifications, elite university degrees, or prestigious positions that seem inconsistent with the applicant's age or experience should be verified independently.
  • Resumes sent in unusual formats (e.g.,  .exe,  .scr,  .js) or password-protected files may conceal malware.
  • Unnatural phrasing or keyword stuffing without meaningful context can indicate the use of generative tools or template manipulation.
  • The file properties may contain suspicious author names, software used, or unusual timestamps.
  • A person claiming to represent a staffing agency or hiring company should be verifiable through corporate directories or LinkedIn.
  • Fraudulent recruiters often pressure HR staff to make quick decisions, bypass vetting, or approve payments.
  • Official recruiters rarely use Gmail, Yahoo, ProtonMail, or other personal email services.
  • Any recruiter or hiring manager unwilling to follow your established HR policies or documentation practices may be suspect.
  • Watch for attempts to redirect background checks, salary negotiation, or equipment purchases to unfamiliar third parties.

For job seekers:

  • Contact the employer through official company email addresses, websites, or phone numbers. Avoid communicating with "recruiters" who use personal email accounts or messaging services. 
  • Research companies on LinkedIn, Glassdoor, etc.
  • Demand video interviews with cameras on.
  • Never send money or sensitive info without validating the requester.
  • Verify recruiters via official company websites, not provided links.
  • Verify the company's legitimacy through online reviews and reputable sources. For example, find the company on Glassdoor or other sites to verify its authenticity and obtain the contact information for its human resources department. Then, visit the company’s website and locate the phone number of their HR or Security Office. They should match.   
  • Next, explain that you're a candidate for a position with the company, verify that the recruiter you have been talking to is truly a recruiter for that organization, and verify that the person is actually handling your specific recruitment action (vs. an imposter posing as that recruiter).
  • If you cannot confirm the validity of the recruiter and recruitment action, you will need to continue with steps to protect your identity and finances.  
  • If the recruiter works for an independent recruiting firm, contact the recruiter's company to verify their employment and that they are handling your specific recruitment.

For Employers:

  • Use secure platforms to collect resumes.
  • Verify applicant identities and perform background checks. 
  • Contact the applicant via out-of-band communications (e.g., social media) to confirm their identity. 
  • Scan attachments for malware.
  • Train HR professionals to recognize the subtle signs of fraud and malicious behavior during hiring interactions.
  • Conduct monthly security awareness briefings with real-world examples of resume and recruiter scams.
  • Use phishing simulations that include fake job applications to test internal vigilance.
  • Maintain an up-to-date HR fraud response checklist for staff to reference during suspicious interactions.
  • Encourage staff to verify independently and escalate unusual behavior to your IT or cybersecurity team.
  • Please report scams to the MCPD’s non-emergency number at 301-279-8000.
  • Review  Fraud Reporting for other reporting options.
  • You may file a complaint with the Montgomery County Office of Consumer Protection (OCP).  Please review OCP’s Frequently Asked Questions before filing.
  • Share your experience with family and friends, as well as on social media platforms, to alert others about the scam and prevent them from falling victim.  However, be aware that scammers monitor social media to offer  recovery scams, claiming to recover your losses for a fee. 
  • If you have disclosed personally identifiable information during a fake job interview process, review related bank statements, credit reports, and other financial accounts for unauthorized activity.
  • Report any suspicious charges or accounts to the respective institutions.  See Identity Theft for additional ways to protect your finances. 

References: