If you’re looking for a new job online, be careful. The FBI warns that scammers are posting fake job ads using the names of real companies in an attempt to trick applicants into handing over sensitive information.
The program leverages the way companies post job vacancies on various recruitment websites. Fraudsters will do the same by posting falsified job offers.
The FBI did not name the recruitment platforms involved, but said that in one instance the site allowed anyone to post a job, including on official company pages, without user verification. “These offers would appear alongside legitimate jobs posted by the company, making it difficult for applicants and the impersonated company to discern which job offer was real and which was fraudulent,” the agency added.
job posting screen for LinkedIn. ” data-image-path=”articles/05gYWoVUStbFEf1mroCjlqt-3.png” class=”my-4″/>
The job posting screen for LinkedIn.
According to BleepingComputer, the FBI may be referring to a vulnerability in LinkedIn, which allowed anyone, including unaffiliated users, to post a job posting on behalf of a company. LinkedIn appears to have since patched the flaw by requiring job postings to verify the listing via an email address registered with the employer.
The FBI adds that scammers will also replicate legitimate job postings using the same HR logos, content, and employee names, but changing contact information. Fraudsters will then circulate the job postings to other networking sites.
It’s also easy for job seekers to fall for the trap, as it’s common practice to provide personal information to an employer during the application process and once a job has been secured. In the wrong hands, the same information can be used to commit identity theft. The FBI also noted that the scammers behind the scheme may even try to trick applicants into sending money or credit card information before an offer is made – a huge red flag.
Recommended by our editors
“Legitimate businesses will request PII (personally identifiable information) and bank account information for payroll purposes AFTER hiring employees,” the FBI added. “This information is safer to give in person. If in-person contact isn’t possible, a video call with the potential employer can confirm identity, especially if the company has a directory to compare employee photos to.
“As of early 2019, the average loss reported by this scheme is nearly $3,000 per victim, and many victims have also reported that the scheme negatively impacted their credit rating,” the FBI added. . To protect yourself, the FBI recommends first verifying that a job offer is legitimate by visiting the employer’s official hiring page or contacting the employer’s human resources office.
Do you like what you read ?
Sign up for Security Watch newsletter for our top privacy and security stories delivered straight to your inbox.