How to Avoid Recruiting Scams: Tips from our Cyber Defense Team
As job seekers, it’s vital to be aware of the real and growing dangers of recruiting scams. Cybercriminals are becoming increasingly creative in their methods, leveraging everything from AI to deepfake technology to deceive their targets. By staying vigilant, being cautious of unsolicited requests, and verifying the legitimacy of job offers, you can protect yourself from falling victim to these scams.
The Citizens Cybersecurity Defense team has compiled key insights on what to look for and how to protect yourself.
"One incredible thing about our Cyber Defense department is that colleagues across teams are willing to share their expertise and knowledge with others, especially those who are new to the field. As a manager, I encourage analysts to collaborate with other teams to learn from others and help expand their knowledge. We have such an impressive range of talent. It's important to leverage our in-house experts to help our analysts mature and grow."
Lea Thorpe, Threat Intelligence Manager
The current threat landscape
Recruiting scams are on the rise, and they’re becoming more sophisticated. Here are some concerning trends our team has observed:
- Hackers are targeting job seekers to steal valuable credentials: Cybercriminals want access to usernames, passwords, corporate bank accounts, email accounts, and even IT administrator credentials. These attacks have been linked to both cybercriminals and nation-state actors.
- LinkedIn is a frequent target for attackers: Hackers pose as recruiters and convince job candidates to download malicious software, such as fake video conferencing apps or coding challenges, which installs malware on their devices.
- The use of AI and deepfake technology is increasing: AI has made it easier for cybercriminals to scale their operations. From phishing emails to video calls, attackers can create compelling, believable communications.
- Job scams are rising at an alarming rate: In 2023, consumer reports of job scams increased by 118%, with losses totaling $367 million in 2022 alone. The average individual loss for job-related scams was $2,000, compared to $650 for general fraud.
Red flags to watch out for
Recognizing the warning signs is the first step in protecting yourself. Here are some common tactics used by scammers:
Phishing emails and Smishing (SMS phishing) messages: Be cautious when you receive messages on platforms like LinkedIn, other social media networks or in an SMS text. A legitimate talent acquisition team will not ask you to move conversations to apps like Telegram.
Unsolicited software downloads: If someone asks you to download a program, application, or tool during the recruitment process that isn't verified by the employer as part of their hiring process, this is a major red flag. It could be an attempt to install malware on your device.
Suspicious links: If you receive an unexpected link, don’t click on it immediately. Always check where the link leads, and if you’re unsure, use tools like VirusTotal to determine if the website is safe.
Requests for personal information or money: Legitimate companies will not ask for sensitive information, such as your banking details or payment card numbers, until after they have hired you. Be particularly cautious of any request for money upfront—this is a strong indication of a scam.
Steps to protect yourself
The best defense is a proactive approach. Here are steps you can take to safeguard your information:
Research the company
Before engaging with any recruiter or organization, do a quick online search of the company name followed by “scam” to see if there are reports of suspicious behavior. Check the company’s reviews and any claims of fraud with the Better Business Bureau (BBB).
Report suspicious activity
If you encounter a suspicious job offer or communication, you should report it to the Federal Trade Commission (FTC), which investigates and tracks these scams.
Stay informed
Cyber threats are evolving rapidly. Stay updated on the latest trends and educate yourself on new techniques used by scammers. The more you know, the better prepared you’ll be to spot and avoid a potential threat.
Stay safe, stay informed, and remember: If something feels off, it probably is.
Stay vigilant during your job search—learn more about our hiring process and career tips on our Job Seeker Resources page, or explore exciting opportunities in Cybersecurity to take the next step in protecting the future.