Employment Scam

An employment scam (also called a job scam or fake job offer scam) is a social-engineering attack that exploits the job search or the first days of a new job. The attacker poses as a recruiter, a hiring manager, an HR department or — increasingly — the victim's new boss, and uses the promise or the excitement of employment to extract money, personal data, banking details or access. Variants range from fake job postings that harvest identity documents, to "equipment purchase" schemes that ask the new hire to buy a laptop from a fake supplier, to boss-impersonation messages that arrive before the first day asking for gift cards or a bank account "for payroll setup".

How it works

The attack relies on two things job seekers and new starters have in abundance: eagerness to comply and no baseline for what is normal. In July 2025 the US Federal Trade Commission warned in New job? How to spot boss imposter scams that scammers watch social media for job announcements and then contact the new employee pretending to be their manager or HR, with urgent requests before the person has met anyone at the company. The FTC's advice captures the tell: an employer may legitimately need your Social Security or bank account number, "but the new boss or HR aren't likely to call, text, or email you out of the blue." Fake-recruiter variants work the same way from the other end, often using the name and logo of a real company and a look-alike domain, and sometimes leading to advance-fee fraud (paying for training, equipment or background checks) or money mule recruitment disguised as a remote "payments processing" role. The scam also runs in reverse: attackers use synthetic identities to get hired themselves and walk trusted access in through the recruiting funnel.

How to defend

For organizations, employment scams are both a brand-abuse problem and an onboarding-security problem. Publish a clear statement on your careers page about how you recruit — which domains you email from, that you never ask candidates to pay for anything, and that offers are never made over messaging apps — and monitor for look-alike domains and fake postings. For new starters, put the counter-scam message into pre-boarding: tell them, before day one, exactly who will contact them and how, and that the company will never ask for gift cards, one-time codes or banking details by text or chat. Our guide to new hire security onboarding treats this as the first security lesson a new employee should receive, because the attackers know the start date too. Boss-impersonation variants are a form of CEO fraud and should be handled with the same rule: verify any request involving money or data through a known channel before acting, and report it — an early report from a new hire is one of the strongest positive signals a human risk score can record.