A message lands in your inbox on a Tuesday morning. The subject line reads like a real recruiter pitch: a role that fits your background, a salary range that sounds right, a calendar link for a brief call. The logo looks legitimate. The signature names a company you recognize. And yet something feels slightly off. That instinct is worth trusting. According to the Federal Trade Commission (FTC), reported job scam losses climbed from around $90 million in 2020 to over $501 million in 2024, a more than fivefold increase in four years, and the tactics are getting harder to distinguish from genuine outreach.

Why real outreach and fake outreach look almost identical now

The channels have collapsed. As HR Dive reported, the most common methods scammers use are exactly the same ones legitimate recruiters rely on: email, text messages, unsolicited LinkedIn messages, and direct outreach through job boards. There is no separate scam channel you can sidestep. The fake recruiter and the real one both reach you the same way, on the same platform, sometimes on the same day.

This problem is sharper if you are searching for remote roles or considering positions with companies you haven't heard of before. Cross-border and fully remote outreach is harder to verify by nature: you may not recognize the company, the recruiter has no traceable local presence, and communication tends to drift onto messaging apps where fraudsters operate with far less accountability. The FTC's Consumer Sentinel Network data consistently shows that people in their 20s and 30s, the demographic most actively applying for remote and tech-adjacent roles, report job scam losses at higher rates than any other age group.

The tells that still work

No single signal is definitive on its own. But a cluster of warning signs, seen together, still separates real recruiter outreach from fraudulent contact. Before you reply to any cold pitch, run through this list:

• The email domain does not match the company. A real recruiter at a company called Northfield writes from something like [email protected], not from a Gmail address or a lookalike domain like northfield-careers.co or northfieldhr.net. Domain mismatch is the single most reliable flag.
• The role sounds too good given how little they know about you. Legitimate recruiters have read at least the top of your resume before reaching out. If the pitch describes a senior-level salary for a role that clearly doesn't match your experience, that gap is intentional: the goal is to get you excited enough to skip verification.
• They push to move the conversation off-platform fast. A quick pivot to WhatsApp, Telegram, or a personal email address after the first message is a well-documented pattern. Legitimate recruiters are generally comfortable staying on LinkedIn or within a company's applicant tracking system for initial conversations.
• They ask for money, equipment fees, or banking details before you have signed anything. No legitimate employer charges for onboarding, background checks, or work equipment. If a direct deposit setup or a processing fee is requested before an offer letter exists, end the conversation.
• The interview is a text exchange followed by an immediate offer. Even a fast hiring process involves a video call with someone whose face and full name you can verify independently. Text-only interviews that produce an offer within 48 hours are almost always fraudulent.

How to verify a recruiter in five minutes

You do not need to run a background investigation. You need a short, consistent checklist you apply every time a cold pitch arrives. Here is what actually works in practice:

• Search the recruiter's name on LinkedIn independently. Do not click the profile link inside the message. Open LinkedIn in a separate browser tab, search the name directly, and check whether the profile has a coherent career history, real endorsements, and mutual connections that predate this month.
• Cross-check the role on the company's own careers page. If the recruiter says they are filling a Product Manager role at a real company, that listing should appear on the company's official site. If it does not, ask the recruiter to point you to the posting. Evasion or silence tells you what you need to know.
• Read what current and former employees say. A quick scan of verified employee reviews tells you whether the company is real, whether it hires for remote roles, and whether other candidates have flagged suspicious outreach from people claiming to represent that employer. Pattern recognition across multiple data points is faster than investigating alone.
• Ask one detail only a real recruiter would have. Try asking for the hiring manager's name and which team the role reports into. A legitimate recruiter answers in a couple of sentences. A fraudster stalls, deflects, or steers the conversation somewhere else.

What to do if you have already engaged

If you have already replied to a message that now feels wrong, do not panic and do not delete the thread. Your screenshots and message history are the evidence that protects you.

Stop responding, but save everything. Capture screenshots of the profile, the messages, and the email domain. If you shared personal data, including a copy of a government-issued ID, your Social Security number, or your banking details, contact your bank the same day. Under the Fair Credit Reporting Act (FCRA), every US consumer has the right to place a free security freeze on their credit file with Equifax, Experian, and TransUnion. Use it. The Consumer Financial Protection Bureau (CFPB) maintains a step-by-step guide at consumerfinance.gov for exactly this situation. If money was transferred, file a report with the FTC at ReportFraud.ftc.gov and with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. Both agencies use these reports to build enforcement actions, and filing is straightforward.

Report the profile to the platform as well. LinkedIn, Indeed, and most major job boards act on impersonation reports faster than most candidates expect, particularly when the report includes concrete screenshots and names the real company being impersonated.

What you can reasonably expect from platforms

Several major platforms are investing in authentication features: verified recruiter badges, employer-domain checks, and watermarks on official job listings, so that a legitimate outreach message carries a signal that is harder to fake. You will see more of this over the next year, particularly on LinkedIn and the large job boards. Use those signals when they are present, but treat them as one input in a broader check, not a guarantee on their own. A verified badge confirms that an account passed a platform's identity check. It does not confirm that the role is real or that the terms you are being offered are legitimate.

For now, the practical burden of verification still sits with you as the candidate. That is an imperfect situation, and the FTC's continued documentation of rising losses confirms the problem has not been solved at the platform or regulatory level yet. The useful reality, though, is that most fraudulent outreach collapses quickly under even basic scrutiny: a mismatched domain, a role that does not appear on the company's careers page, a request for payment. Building the habit of running a short check before every reply means the vast majority of scam attempts fail at the first step.

The bigger point

Legitimate recruiter outreach is still worth answering. Most of what arrives in your inbox is genuine, and treating every message as a threat means missing real opportunities. What serves you best is not suspicion across the board; it is a fast, repeatable process that lets you confirm the real ones quickly and set aside the fake ones without wasting hours on them.

Five minutes of verification is a reasonable price for protecting a job search that might take five months. The FTC data makes one thing clear: the volume of fraudulent outreach is not shrinking. The candidates who navigate it best are the ones who treat verification as a standard step, not an exception they invoke only when something feels dramatically wrong.