Private digital intelligence bureau Lawful OSINT — Cyber monitoring — Due diligence
Investigator comparing a job offer, company record and professional contact channel

Recruitment fraud guide · 12 min

Verify a job offer and recruiter before sharing personal information.

A convincing advert can borrow the name of a real company. Verify the role, recruiter and contact channel against independent sources before sending documents or money.

Published 23 September 2026Reviewed by IIS editorial team

At a glance

Four rules for a useful review.

  • Find the role through an official channel.
  • Check the legal entity and contact domain.
  • Do not pay unexpected recruitment fees.
  • Share only documents needed at that stage.

Step-by-step method

A reproducible path from question to conclusion.

  1. 1

    Preserve the original offer

    Record the URL, platform, date, displayed name, contact address and requested documents. Keep the message without opening an unexpected attachment.

  2. 2

    Return to the employer independently

    Look for the vacancy on the official website or contact recruitment using details found separately. A copied page or social profile is not enough.

  3. 3

    Resolve the recruiter’s identity

    Compare their name, role, email domain and public company details. An outside agency should be able to explain its mandate without asking for a secret.

  4. 4

    Assess the requests

    Flag payment, banking details, a full identity document, login code, software installation or a move to private messaging. Require a reason proportionate to the recruitment stage.

  5. 5

    Decide and report

    Pause if the elements conflict. Report the advert to the platform and the impersonated employer. If you shared data, record exactly what was sent and protect the relevant accounts.

Separate a real employer from the channel used

A company may exist while the correspondent has no connection to it. Check the registered domain, application route and call-back number independently.

A page that resembles the official site is weak evidence if its registrable domain differs. Visit the known site without following the received link.

Match shared data to the process stage

A CV or portfolio may be appropriate early on. Full identity documents, bank details and home addresses need more context and a secure channel.

A request to pay fees, receive parcels or use your bank account is a reason to stop and verify immediately.

Respond if the contact was fraudulent

Keep messages and URLs, notify the employer whose name was used and report the advert. If you entered a password, change it through the official service and revoke active sessions.

Describe facts without exposing more personal data or accusing an individual based on a displayed name alone.

Common pitfalls

Four shortcuts that weaken the result.

Trusting the logo

A logo and visual identity are easy to copy.

Calling the supplied number

It may belong to the sender.

Paying to proceed

Unexpected fees or transfers require independent verification.

Sending the full file

Share only what the confirmed stage requires.

Practical questions

Frequently asked questions.

Does a real company prove the advert is genuine?

No. Its name may be impersonated; confirm the vacancy and recruiter through a separate official channel.

Is a video interview enough?

No. It may clarify the process but does not establish the person’s legal identity or authority.

What if I sent an identity document?

Keep a timeline, inform the relevant organisation and seek advice from the appropriate service according to the data and observed risk.

Editorial scope

Written and reviewed by Internet Intelligence Service on 23 September 2026. This educational guide describes a lawful, defensive method. It is not legal advice, an emergency service or authority instruction.