2check.click

6 min read Last updated: July 2026

LinkedIn Recruiter Scams: How to Spot a Fake Job Offer

A recruiter messages you on LinkedIn. The company is recognizable, the role matches your background, and the salary is above market. The profile looks real — photo, work history, mutual connections. By the time you realize something is wrong, you may have sent copies of your passport or paid a background check fee that will never be refunded.

Someone contacts you on LinkedIn claiming to be a recruiter from a recognizable company. The profile looks real, the job sounds great, and the salary is higher than you expected. It isn't a lucky break — it's the opening move of a scam designed to steal money or personal data through a convincing fake hiring process.

The end goal is always one of three things: get money from you, get your personal documents, or get you to install something on your computer.

How The Scam Works

Step 1 — First contact. You receive an InMail or connection request from someone claiming to work in talent acquisition at a recognizable company. Their profile has a photo, a work history, sometimes mutual connections. The message references your job title or a skill from your profile — just enough to feel personal.

Step 2 — Moving off LinkedIn. Within a few exchanges, they suggest switching to WhatsApp or email: "LinkedIn messaging is a bit slow." This removes you from a platform where a fake profile can be reported.

Step 3 — The fake interview. The interview happens over text or a form. Video calls don't happen — there's always a reason. The hiring manager is traveling. The system doesn't support it.

Step 4 — The offer. A professional-looking offer arrives quickly — sometimes the same day. It includes the company's real logo, copied from their public website.

Step 5 — The ask. Common demands include a background check fee described as reimbursable on your first paycheck, an equipment deposit before hardware ships, your government identification number and bank details for payroll setup, or a software download for an HR portal that installs malware.

Example Scam Messages

Example 1 — Initial contact

Hi [Name], I came across your profile while sourcing for a Senior Operations Manager role. The position is fully remote, pays $140,000–$165,000, and includes strong benefits. Are you open to a quick chat? — James Whitfield | Talent Partner, TechHire Consulting

Example 2 — After the interview

Our team was impressed. Before HR can process your paperwork, we need background verification. Please visit [link] to begin — the $75 fee is fully reimbursed on your first paycheck.

Example 3 — When you hesitate

The hiring manager is hoping to confirm a start date by end of week. I'd hate to see you miss this — positions like this don't stay open long.

Common Warning Signs

  • The recruiter's profile was created recently or has few genuine connections.
  • Salary is noticeably above market rate for your experience level.
  • You're asked to move to WhatsApp or personal email immediately.
  • The interview is text-only — no video, no phone call, no real person visible.
  • A job offer arrives the same day as the interview.
  • Any fee is required before your first paycheck.
  • Personal documents requested before a verified employment contract.

Common Mistakes

  • Assuming a company is legitimate because its name appears on the recruiter's LinkedIn profile — anyone can claim to work anywhere.
  • Treating a professional-looking offer letter as proof of legitimacy — logos and formatting can be copied from any public website in minutes.
  • Paying the background check fee expecting reimbursement — no legitimate employer requires candidates to pay for pre-employment screening.
  • Sharing passport or government ID before verifying the role exists through the company's official HR channel.

How To Verify It Is Legitimate

Before engaging further with any recruiter who contacted you unsolicited, take these steps.

Verify the person exists at the company. Search the company's official website for a staff directory or HR contact page. Use that information — not anything the recruiter gave you — to confirm the role is real.

Check the recruiter's LinkedIn profile. Look for when it was created (visible at the bottom of their profile page) and whether endorsements come from real colleagues. A profile created six months ago with 800 connections is a red flag.

Verify the offer letter. Real offers come through a company's verified HR or payroll system — not as an email attachment from a personal address. Search the company's website for their careers portal and check whether it matches.

Check any links they send you. Paste the URL into 2check.click before visiting. Scammers register domains designed to look like real company portals — a letter swapped, a hyphen added, a different ending.

No legitimate employer charges candidates. Any payment request before employment begins — background checks, deposits, training fees — is not a real hiring practice.

What Happens If You Respond

Paying a fee means that money is likely gone — scammers use payment methods that are difficult to reverse. Sharing identity documents opens the door to fraud in your name. Downloading their portal software can install tools that capture passwords and banking sessions from your device.

What To Do Next

  • Do not pay any fee or share identity documents with an unverified employer.
  • Report the LinkedIn profile using the Report option on their page.
  • If you've paid: contact your bank immediately and report the transaction as fraud.
  • If you've shared personal documents: contact your national identity protection service and consider placing a fraud alert with your local credit bureau.
  • File a report with your national consumer protection authority.

How 2check.click Can Help

If the recruiter sent any link — to an application portal, background check service, or HR system — paste it into 2check.click before clicking. It checks whether the domain is newly registered, whether it's designed to mimic a real company's name, and whether unusual redirect patterns are present. A real employer's system won't trigger these signals. If the process moved to WhatsApp and you received links there too, check those — WhatsApp job scams use identical link-based traps.

Frequently Asked Questions

The recruiter has 500+ connections. Doesn't that mean they're real?

Connection counts can be accumulated over time or artificially inflated. Check when the profile was created and whether endorsements come from people who appear to know them personally.

Is it normal to move the conversation to WhatsApp?

Occasionally legitimate recruiters do this — but not as the very first step, and not before any real conversation has happened. If you're pushed off LinkedIn immediately, treat it as a warning sign.

The offer letter has the company's real logo. Doesn't that prove it's legitimate?

Anyone can copy a logo from a public website and paste it into a document. A professional-looking letter proves nothing. Verify through the company's official HR portal using contact details you find yourself.

I've already shared my bank details. What should I do?

Contact your bank immediately to report potential fraud and ask what protective steps are available. Monitor your account closely for any unauthorised transactions.

I've already paid the background check fee. Is there any way to recover it?

Contact your bank and explain what happened. There may be a short window to reverse the transaction depending on how you paid. Gift card payments and cryptocurrency are typically unrecoverable.

Popular Guides

Received a suspicious link?

Analyze it now →

Related Articles