Fake Job Offers and Recruitment Scams: How to Verify a Recruiter and What to Do If Targeted

The simplest test still catches most fake job offers: a genuine employer does not ask you to pay to get hired. Not for registration, not for "training kits", not for a background check, not to "release" an offer letter. If money is flowing from you to them before you have started work, stop there.

But modern scams are subtler than a flat fee. Some start by paying you small amounts for "tasks" before asking for a deposit. Some copy a real company's logo and careers page almost exactly. Some just want your Aadhaar, PAN and bank details so they can use your identity elsewhere. So beyond the money rule, it helps to know how to check whether a recruiter is real, and what to do if something has already gone wrong.

Patterns that should make you slow down

• An "offer" for a job you never applied to, often on WhatsApp or Telegram, with no interview or just a chat-based one.
• Part-time "work from home" that involves liking videos, writing reviews or rating hotels, where you get small payouts at first and then are asked to "invest" to unlock bigger tasks. This pattern is widely reported, and the early payouts are bait.
• An interviewer who won't do a video call, won't share a company email, or refuses to name the hiring manager.
• Offer letters sent from Gmail, Yahoo or similar free accounts, or PDFs where the company address, logo or signatory looks slightly off.
• Requests for OTPs, UPI PINs or net-banking details "for payroll setup". No employer needs these.
• Pressure: "Only two seats left, pay today", or "resign now and join Monday" before anything is in writing.
• Requests to install remote-access software or unknown apps "for the interview".

CareerCola's job safety page lists these and more. It is worth reading once end to end, because it also explains what CareerCola does and does not verify.

How to check if a recruiter is genuine

Don't verify a recruiter using the contact details the recruiter gave you. That is circular. Verify through independent routes:

1. Find the company's official careers page yourself by typing the company's main domain or searching for it, not by clicking the link in the message. See if the role exists there. Big companies list their openings publicly.
2. Check the email domain. Is it exactly the company's domain? Look-alike domains, with an extra letter, a hyphen or a different ending, are a classic trick.
3. Look the person up. A real recruiter usually has a professional profile that matches the company, a history, and connections who work there. A profile created last month with a stock photo is a warning sign.
4. Call the company through an official number from its own website and ask whether the person and role are real.
5. Search the phone number, email or website in the Suspect Repository on the National Cybercrime Reporting Portal. It lets citizens check identifiers such as mobile numbers, email IDs, account numbers and URLs against known cybercrime reports. No match doesn't prove something is safe, but a match is a very clear signal.

If you found the job on CareerCola, compare what the recruiter tells you with the job page and the company profile. The work mode, location, employment type and apply link should all be consistent. External apply links should lead to a careers site you recognise.

Agencies and consultants

Recruitment agencies and staffing firms are a normal part of hiring in India, and many are legitimate. They are usually paid by the employer. An agency asking you, the candidate, for a "registration" or "placement" fee to access jobs in India is exactly the pattern the job safety guidance warns about. For overseas jobs the rules are different. Recruiting agents must be registered with the government, so see our guide to verifying a foreign job offer.

If you've already shared details or paid

Move fast, and do not let embarrassment slow you down. These scams are designed to fool careful people.

• If money has left your account: call your bank's official fraud line to flag the transaction, and report it through the national cybercrime helpline 1930 or at cybercrime.gov.in. Speed matters because a quick report gives the best chance of the money being traced or held.
• If you shared an OTP, PIN or password: change passwords, and ask your bank to block cards or UPI access as needed.
• If you shared Aadhaar or PAN copies: watch for loans, SIMs or accounts opened in your name. Keep your screenshots and chats, because they are evidence.
• For suspicious calls, SMS or WhatsApp messages even when you have not lost money, the Department of Telecommunications' Chakshu facility on Sanchar Saathi is meant for reporting suspected fraud communication. The cybercrime portal also has a "Report Suspect" option for numbers, handles, emails and URLs.

Before you block the scammer, save everything: chat exports, payment receipts and transaction IDs, the offer letter, profile links and phone numbers.

Reporting a listing on CareerCola

If a job or company on CareerCola looks fraudulent, open that job page or company profile and use Report this job or the company report link. The reasons include suspected fake job, payment or fee request, suspicious employer, misleading information, and phishing or scam. Adding the message snippet or URL you received helps moderators act. Your identity as the reporter is not shared with the employer.

A few habits that make you a harder target

Keep a separate email for job applications. Share identity documents only after a verified written offer, and only through the employer's official onboarding system. Don't upload bank details to a form you reached from a chat link. And remember that genuine hiring can move fast, but it never needs secrecy, and it never needs your money.

If you want to see how a real job description is usually written, compare anything suspicious with our guide to reading a job description. Real JDs are specific about the work. Scam ones are usually vague about the work and very specific about the pay.