How to Spot a Fake Recruiter
A message from a recruiter at a famous company lands in your inbox or DMs, polished, flattering, and about a role you never applied for. Sometimes it's real. Often it's a fake recruiter using a well-known brand name as bait. This guide shows you exactly how to tell the difference before you reply, share a CV, or move the chat to WhatsApp.
How we check this: Reflects how the FTC and FBI describe recruitment and brand-impersonation job scams, and the domain-verification checks that confirm a legitimate sender. · Last reviewed: 2026-08
What does a fake recruiter look like?
A fake recruiter almost always arrives unsolicited: a LinkedIn DM, an email, or a text about a role you didn't apply for, from someone who name-drops a company you'd recognize, NVIDIA, Microsoft, Puma, a big staffing firm. The pitch is polished and complimentary: your profile "caught our attention," the pay is generous, the work is remote and flexible.
The tell is usually in the details, not the wording. Within a message or two the "recruiter" wants to move you off the platform, to WhatsApp or Telegram, where there is no company oversight and no paper trail. From there the ask shifts to money, documents, or a login.
How can I check if a recruiter is real?
Check the domain, not the display name. Anyone can set "NVIDIA" as a sender name, and anyone can write it before the @ in an address like [email protected]. What matters is the part after the @, the domain. A real recruiter writes from the company's own domain (for example an @nvidia.com address), never from Gmail, Outlook, or a look-alike.
Then verify independently. Open the company's real careers site by typing its address yourself, not by clicking a link in the message, and confirm the role and the recruiter exist. Real hiring runs through the company's own applicant-tracking system, not a Google Form or a personal chat app.
You can also paste the recruiter's message into Hunch: it reads the sender and the wording for the patterns fake recruiters reuse, and tells you in plain words why something looks off.
What are the red flags of a recruiter scam?
Any one of these is worth a pause; two or more together is a strong signal to stop and verify:
It's unsolicited and name-drops a famous brand. The sender's address is a free mailbox (Gmail, Outlook) or a look-alike of the real domain. The chat moves to WhatsApp or Telegram fast. You're asked to pay for equipment, training, or a "starter kit." Sensitive documents, ID, passport, bank details, are requested before any real interview. The pay is far above the going rate. The "job" quietly turns into moving money, buying gift cards, or investing in a platform the recruiter recommends.
What do fake recruiters actually want?
Most fake-recruiter scams are after one of four things. Your credentials, a fake "application portal" that captures your username and password. Your money, upfront fees for equipment or training you'll never be reimbursed for. Your identity, an onboarding form that harvests your ID, date of birth, and bank details. Or your unwitting help, roles that turn you into a money mule, or funnel you into an investment "opportunity," the gateway to pig-butchering.
No legitimate employer asks you to pay to work, and none needs your bank details or a copy of your ID before a real offer and a real interview.
What should I do if I already replied or sent documents?
Stop the conversation. Don't send anything more. If you shared a password, change it now and turn on two-factor authentication on that account. If you sent bank details or paid a "fee," contact your bank or card issuer right away to flag it and try to stop or reverse the payment. If you sent a copy of your ID or passport, watch for identity-theft signs and consider a credit freeze where available.
You haven't done anything wrong, these scripts are built to look exactly like a real hiring process. Acting quickly is what limits the damage.
FAQ
Do real recruiters contact you on WhatsApp or Telegram?
Rarely, and almost never as the first step. A genuine recruiter reaches you through the company's email domain or a professional platform and keeps hiring inside the company's own system. A quick push to WhatsApp or Telegram is one of the most reliable signs of a fake recruiter, it moves you somewhere with no oversight and no record.
Is a recruiter emailing from a Gmail address a scam?
Treat it as unverified until you confirm it. A real company recruiter writes from the company's own domain (the part after the @), not from gmail.com or outlook.com. A brand name before the @, like [email protected], is cosmetic and proves nothing, only the domain after the @ is controlled by the real company.
Should a job ever ask me to pay for equipment or training?
No. A legitimate employer provides or reimburses equipment and never asks you to pay upfront to start work. Any request to buy a "starter kit," pay for training, or send money to "activate" your account is a scam, no matter how professional the offer looks.
How do I verify a recruiter who says they're from a big company?
Don't use any link or number in their message. Type the company's real website address yourself, open its official careers page, and confirm the role is posted and the recruiter is a real employee. Real hiring runs through the company's own applicant-tracking system, never a Google Form, a personal email, or a chat app.
I gave a fake recruiter my ID and bank details, what now?
Act quickly. Contact your bank or card issuer to flag the account and try to stop any payment, change any password you shared and enable two-factor authentication, and watch for signs of identity theft (consider a credit freeze if it's available where you live). Then report it, reporting helps others and creates the record you may need later.