Searching for a job is stressful at any time, but today's job market is especially tough. According to a recent news report From displacement firms Challenger, Gray & Christmas, US employers eliminated 108,000 jobs in January. Not surprisingly, AI is responsible for a small portion (7%) of those job losses, 22,000 of which are in the tech sector alone.
So it's no surprise that people are flooding job search platforms with resumes and applications. Unfortunately, these are the only answers some people are getting phishing attempt and fake job offers from online scammers. Let's talk about how these scams work, and what you can do to avoid them during your job search.
AI helps scammers succeed on job platforms
Here's how grift works: Criminals will use AI tools to quickly build fake websitesSometimes use stolen graphics to add legitimacy. Scammers post links to these phishing sites on well-known job seeking platforms like Indeed and LinkedIn. Job seekers will upload their resumes or fill out forms on fake websites with vital information such as address, phone number, social security number, and employment history. The scammers abscond with all the data and the job post disappears. The job applicant will never know if their data has been tampered with or if the company has cheated them during the recruitment process.
According to the FBI, scammers sometimes contact victims and Ask them to pay in advance for background checks, job training, or “supplies” Like a working laptop or smartphone for which they promise you will be reimbursed. Once the crooks get the money, they disappear.
Some scammers may even send you fake checks for purchases in exchange for your banking information. You try to deposit a check and it bounces. Meanwhile, the scammers have your account information.
Avoid these job posting red flags
Looking for a new job makes you naturally insecure identity theft Scams. It starts with the application. You will have to leave all kinds of personal information through your resume, cover letter or web form and all this will be done without any human interaction. Unless explicitly stated in the company Privacy Policy or Terms of Service, you don't know where your job application information is going, who is seeing it, or how that information will be stored or used.
Moreover, desperation can lead people to take drastic actions with disastrous consequences, such as paying a stranger for more information about a new job or entering their Social Security number and financial account information on an insecure web form. Let's take a moment to examine the red flags you may encounter when searching for jobs online:
Be careful of cold contacts
According to a LinkedIn spokesperson, scammers on the platform are five times more likely to contact victims outside their network. If you receive a message offering you a dream job from someone you've never met before or heard of, be cautious. Scammers often offer people excellent-looking opportunities, then send them phishing links when it's time to apply.
Never follow a scammer to another location
The spokesperson also told me that according to LinkedIn's internal research, online scammers are twice as likely to lure victims into off-platform conversations. In other words, if someone you don't know contacts you on LinkedIn or another platform and asks you to call them on the phone, or sends a link to continue the conversation on a different platform, such as messaging appPolitely decline the conversation or ignore it, as you are facing a major threat.
Professionalism matters online too
According to LinkedIn, scammers often send unsolicited messages to job seekers using informal, unprofessional or vague language to describe jobs that are too good to be true or are not realistic for the victim. For example, a person outside my LinkedIn network recently sent me a message offering me a position with duties suitable for a solid summer internship, and the salary was 4 times that of my current job. I did not respond.
Does this company or person exist?
These days it's incredibly easy to fill out a profile with AI-generated text and photos. According to research by LinkedIn, scammers often create fake profiles to gain victims' trust. Before you accept a new contact request on a job-search site like LinkedIn, ask yourself the following: Is this someone I've met before and worked with? Are they connected to other people I know, trust, and have met in person before? Is this person's profile activity recent?
On LinkedIn, a verification badge indicates that the person or company has been independently verified by the platform. Scammers often have unverified profiles.
Get our best stories!
Stay safe with the latest security news and updates
By clicking Sign Me Up, you confirm that you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
If the profile appears legitimate, it's time to research the company the person is representing. Does the company actually exist? Do they have an office location or a phone number you can call to verify that this is the case? Does the recruiter or hiring manager work for that company? Is the company publicly recruiting for this job? Verify this information on the company's website and confirm that the company is present on other social platforms. Does the job posting link to a secure web address that begins with https://? Hover your mouse over the link to show the correct URL.
Recommended by our editors
Is this a real job post?
OK, let's say the company and the person contacting you appear to be legitimate. Now is not the time to take a sigh of relief. Next, you need to make sure that the job you are being offered exists. If you found a job posting on a third-party job board like Indeed, FlexJobs, or LinkedIn, check if that job is listed on the company's website. Not every employer hosts a job posting page, but many do. If you don't see a condition listed there that you've seen elsewhere, consider it a red flag and keep looking.
If they ask for money, run away
Scammers may also ask for money or bank account information during the interview or initial messaging phase. A legitimate employer will never ask for your banking details unless you have signed a contract and are making direct deposits. Even then, they will only ask to verify the bank name, account number, and routing number or SWIFT code—but Never Your Online Banking username and password.
As office opportunities dry up, underworld alternatives emerge
Unfortunately, crime is one of the only entry-level tech jobs that still pays well. So, in addition to keeping an eye out for fake job posts and messages from people who don't exist, you also need to eliminate job offers that involve illegal activities. According to a November report from Russia-based cybersecurity firm Kaspersky, resumes from teenagers and young adults appearing on dark web forums. Some of the positions available have familiar titles, such as penetration testers and developers, and are advertised as jobs at legitimate corporations on platforms such as Telegram Or small job search platforms.
Data from Kaspersky showed that 69% of job seekers on the dark web did not specify what job they were looking for, opening the door to offers for blatantly illegal jobs such as money laundering, scam call-center work, or development of attack tools. High-impact skills, such as reverse engineering and penetration testing, command the highest salaries in the shadow job market, averaging between $5,000 and $4,000 per month. If you're curious about finding a dark web job forum for yourself, I don't recommend it. Illegal stuff aside, that's it. Navigating the Dark Web It may be more trouble than it's worth.
trust your intuition
Remember, if a job posting doesn't seem up-and-up, take the time to research the company, recruiter, or hiring manager online. A few minutes of searching for more information about a dream job opportunity can save you from the nightmare of a credit crunch in the future.
If your job search falls victim to a scam before you even become an employee, don't panic! First, report the scammer. Law enforcement may not be able to provide immediate relief, but reporting scams Helps prevent long term online crime. If you're a victim of identity theft, PCMag has a guide for what to do next you have been hacked. When you're ready to step up your data privacy and security, check out our tips Avoid excessive data collection.
About our expert
kim's
Senior Writer, Security
Experience
I review privacy tools like hardware security keys, password managers, private messaging apps, and ad-blocking software. I also report on online scams and advise families and individuals on how to stay safe on the Internet. Before joining PCMag, I wrote about technology and video games for CNN, Fanbyte, Mashable, The New York Times, and TechRadar. I also worked at CNN International, where I did field production and reporting on sports that are popular with audiences around the world.
In addition to the categories below, I specifically cover ad blockers, authenticator apps, hardware security keys, and private messaging apps.
Read full biography