Recruitment fraud (or job scams) has become a real problem across many industries, including the finance sector. Quite simply, it is where fraudsters pose as legitimate employers, recruitment consultants, and so on. It’s not a new problem but a growing one and goes hand in hand with technological advances ranging from smartphones to AI. So, what do you need to watch out for and how do you protect yourself — and what should employers know?
What are the scammers after?
Usually, it’s one of two things. The first is money, and the second is personal information. The motivation for money is obvious. Information is slightly more complex. This is often used for identity theft. People who steal your identity can use it to apply for bank accounts and credit cards, attempt to take over your existing accounts, sell your information on the dark web, or blackmail you. Recruitment fraud (using Cvs, employment records, and so on) can be a particularly rich source of information and allow for very convincing impersonations. Finally, a few scammers have no real motivation — they just do it for kicks.
What form do scams take?
Recruitment scams vary widely. They can range from fake job listings to SMS texts to people (and even AI deepfakes) posing as executive recruiters calling individuals and claiming to work for legitimate companies. Some are relatively easy to spot, but others, such as fake recruiters, premium phone line scams (where you are asked to call a number that incurs very high charges), and fake job-site listings, may be very difficult to spot. After all, you might reasonably expect a recruiter to call you out of the blue and be a little cagey; you probably don’t know all the recruiters in your sector; and one job-site listing looks much like another.
What are some common signs of a scam
Some are pretty basic. There might be poor spelling or grammar in the communications. You may be asked to click on a dubious-looking link. And the scammer might only be willing to give out a mobile number or a personal email address. Anything that’s too good to be true should also be suspect. But, increasingly, job scams can feel very convincing — it is surprisingly easy to put together a very professional-looking approach, which then takes real effort to spot, and technology has made targeting and customisation much easier.
What are the scammers’ favourite methods?
The most obvious one is asking for money upfront. You will usually be given a reason, for example, to pay for a background check or as an “admin fee”. Legitimate recruiters do not ask for money in this way. You might also be asked for a scan of your passport or driver’s licence “for security”. Some scammers play a much longer game, though. They may string you along through a series of emails and even fake interviews, and, once they’ve gained your trust, they then tell you they need your bank details in order to set up salary arrangements. Conversely, they may simply harvest a lot of information about you — and that’s the last you’ll hear from them until a debt collector starts chasing you for the bills they’ve run up on the credit cards they took out in your name.
How can I protect myself?
Common sense is your best first line of defence. If someone calls you out of the blue and asks you to make a snap decision or starts asking for details, get their name and tell them you’ll call them back. If they refuse or start pressuring you, they’re likely a scammer. With emails, check the sender’s address and whether the messages look and feel legitimate. Don’t click on links if you have any questions about them. Research the people who contact you. Can you find them on LinkedIn or, better still, a company website? If it’s a recruiter you haven’t heard of, do they have a physical address and landline phone number? And, also, trust your gut. If something feels off, there’s a good chance it is.
What about LinkedIn?
LinkedIn is fertile ground for recruitment scammers. In the second half of 2023, LinkedIn removed more than 63 million fake accounts and almost 109 million scams and spam content. It’s very easy to pose as a legitimate recruiter, and platforms like LinkedIn add a layer of credibility. Along with payment scams and identity theft (via Cvs), LinkedIn scammers may seek to redirect you to phishing sites, involve you in money laundering and pyramid schemes, or fraudulently try to act as an intermediary for a real company (for a sizeable fee).
Beware of psychological tricks
Scammers have a toolbox of mind tricks designed to make you do what they want — whether it’s divulging passwords, sending money, or scanning a passport. A classic one is giving you a time limit. The scammer might say, “Applications for this vacancy close today — you need to pay me $50 now so I can do the background checks.” This puts pressure on you to make an immediate decision and also plays to the loss-aversion bias (where avoiding a loss is prioritised over an equivalent gain).
Others may flatter you, having read up on your LinkedIn profile (and worked out what your unmet career needs are). Some scammers will even use teams (where the target is contacted by multiple people) to build up a feeling of legitimacy. As with many forms of scams, fraudsters rely on people being too embarrassed at being fooled to report them.
What can companies do?
While employees should be alert to the problem, so should employers. They should implement robust protocols, raise awareness, and take precautions. Organisations need to make it very clear within their industry what candidates should expect in terms of approach, job advertising, and process. For example, in the UK, Deloitte has a message on its website setting this out that begins, “We have recently been made aware that some people have been targeted by scammers pretending to be from Deloitte offering potential jobs… .” Organisations should educate their own HR departments, use appropriate technologies to secure their processes and combat fraud, and be responsive to anyone who has questions. They should also work with governments, law enforcement, and recruiters.
What does the future hold?
Potentially, far worse. AI can already fake people’s voices, write fake job ads at scale, create bogus photos, and even conduct some virtual interviews. We may soon face a future where the only way to be certain that the person you’re speaking to is real is to meet them in the flesh.
Visit the Global Career Hub from AICPA & CIMA for help with finding a job or recruiting.
Rhymer Rigby is an FM magazine contributor and author of The Careerist: Over 100 Ways to Get Ahead at Work. To comment on this article or to suggest an idea for another article, contact Oliver Rowe at Oliver.Rowe@aicpa-cima.com.
AICPA & CIMA RESOURCE
Article
“ID Theft Driving Identity Fraud”, AICPA & CIMA, 31 August 2022
