A surge in advanced online scams is putting jobseekers at risk, with tactics such as fake recruiters and the use of malicious software leading to losses up to £18,000 for some individuals. Major job platforms and cybersecurity specialists are issuing strong warnings as fraudulent schemes increasingly target those seeking employment.
Cybercriminals Exploit Online Job Platforms
Candidates looking for employment are being singled out by scammers who pose as authentic recruiters—especially on widely used services like LinkedIn and Indeed. For instance, one jobseeker became a victim after sharing their job search publicly on LinkedIn. Approached by what appeared to be a recruiter, the person went through a video interview and then received a supposed technical assessment as a Google Sheet. The seemingly safe file actually carried malicious software.
Just a few hours after downloading, the victim suffered an escalating attack: cybercriminals accessed their cryptocurrency wallets and wiped out £18,000 in savings. The individual, remaining anonymous, shared that the incident left them “emotionally and mentally drained,” describing the ordeal as devastating and saying, “It’s a horrible feeling to be out a substantial amount — something I wouldn’t wish on my worst enemy.”
Fraudsters Capitalize on Job Search Stress
Reports of these scams have jumped significantly on professional networking sites in recent months. LinkedIn’s newly released statistics highlight that 32% of professionals under 25 have encountered scams, and nearly one in three in this age bracket admit they ignored alert signals due to the fierce job market. LinkedIn further noted many applicants are reluctant to investigate offers deeply out of fear of losing out on scarce roles.
Users are urged to read LinkedIn’s advice for spotting genuine opportunities, such as verifying employers and checking details independently before engaging further. In July, Indeed also released guidance to help users recognize fraudulent activity, underlining that real interviews always occur in-browser and never require extra app downloads.
More Sophisticated Threats: Malware and Counterfeit Apps
Charlie Kelly, a cyber-security researcher at Have I Been Squatted, reported that scammers are adopting increasingly credible tactics, moving away from obvious phishing emails. Their new methods include legitimate-seeming video interviews, the use of actual Google authentication pages, and attackers providing assessment files that appear trustworthy due to digitally signed certificates.
Recruitment fraud extends beyond email: attackers often instruct jobseekers to download fake applications. Examples include prompts like “Install the Indeed app to finish your interview” or offers such as “see salary agreement after app download.” Security experts at Malwarebytes caution that these apps may grant attackers access to personal and private information, which can be leveraged for extortion or financial theft.
Indeed has reiterated that any message requesting a download for interview purposes is always a scam, stressing, “Interviewing through Indeed’s platform happens entirely in a browser and never requires downloading a special app.”
Tips to Avoid Falling Victim
This growing threat underscores the need for jobseekers to be cautious when seeking work online. LinkedIn and Indeed are regularly updating their resources on how to avoid scams and suggest promptly reporting any suspicious solicitation. Experts recommend thoroughly checking the legitimacy of job postings, only communicating through official channels, and never providing sensitive information or installing unexpected files as part of the hiring process.
As competition for jobs remains fierce, maintaining a healthy level of doubt is vital. The sophistication of these new scams illustrates how cybercriminals are using both psychological tactics and advanced technology to prey on individuals searching for new positions.