Is This Job Offer Real? How to Investigate Before You Apply

The recruiter seemed perfect. Their LinkedIn profile was polished, their company was real, and the salary — $85,000 for a fully remote position — was exactly what you had been looking for. The video interview went smoothly. You felt good about it.

Then they asked for your Social Security number to run a "pre-hire background check." You provided it. You never heard from them again.

This is the new shape of job scam fraud. And in 2026, it is getting significantly harder to spot.

The Deepfake Recruiter Problem

In 2024, the FTC received more than 105,000 job scam reports, with total losses exceeding $513 million. That number was devastating enough when scammers were running operations using stock photos and generic email templates.

Now they are using SI.

Synthetic LinkedIn profiles can be generated in minutes — complete with believable work histories, SI-generated profile photos, and endorsements seeded through automated bots. Deepfake video technology has matured to the point where fraudulent "recruiters" are conducting live video interviews using SI-generated faces and voices synced in real time. The person across from you may not be a person at all.

Standard background checks cannot catch any of this. A company can be real. The job title can exist within that company. The interview can feel entirely authentic. And you can still end up defrauded — or with your identity stolen, your bank account drained, or months of your life spent trying to recover.

This is not a warning designed to make you paranoid. It is a framework to help you investigate before you trust.

8 Red Flags That a Job Offer Is a Scam

These signals are not guarantees of fraud on their own. But if you are seeing two or more of them in combination, stop and investigate before taking any action — before responding, before applying, and especially before sharing any personal information.

1. They ask for payment before you start.

Any request for money before employment begins is a scam signal. It may be framed as purchasing equipment, covering training fees, buying a "starter kit," or paying a refundable deposit. Legitimate employers never charge new hires for the opportunity to work. If money flows toward a recruiter before you have a paycheck, you are being defrauded.

2. They ask for your Social Security number before sending an offer letter.

Background checks are a real part of hiring — but they happen after a conditional offer is extended in writing, not before. Any recruiter requesting your SSN earlier in the process is running a data theft operation, not a hiring process.

3. The salary is dramatically high for vague or minimal work.

"Earn $5,000 per week from home — no experience necessary." Inflated compensation attached to undefined work is a hook. The job itself is not the product being offered — your attention, and eventually your money or your data, is. Research what this role typically pays at companies that actually hire for it.

4. The job description is generic and cannot be found anywhere else.

Legitimate job openings appear on company websites, LinkedIn, Indeed, and Glassdoor — usually in multiple places simultaneously. If the role exists only in the message you received and cannot be found through independent search, it was likely fabricated for you specifically.

5. The recruiter is pushing urgency to start immediately.

"This position closes Friday — can you start Monday?" Pressure to move fast is pressure not to investigate. A legitimate recruiter operating in good faith will give you time to complete due diligence. One who cannot is not operating in good faith.

6. Communication moves off professional channels.

Recruiters who push you toward WhatsApp, Telegram, or personal Gmail addresses are bypassing company communication infrastructure — which is usually because there is no company infrastructure to bypass. If the conversation needs to leave the platform where it started, ask yourself why.

7. The company email domain does not match the company.

"HR@microsoft-careers-global.com" is not a Microsoft address. Legitimate recruiters use the company's actual registered domain. Any email address that mimics a company name with added words, hyphens, or extra domains deserves immediate scrutiny — and should be verified against the company's official website before you respond.

8. The offer arrived unsolicited — and was highly targeted.

You did not apply for this. Someone found you. Scammers harvest LinkedIn profiles and specifically target people who have recently activated an "Open to Work" status, who have updated their resume on job boards, or who are publicly identifiable as in career transition. Unsolicited offers are not automatically fraudulent, but they require more scrutiny, not less.

How to Investigate a Job Offer Before You Respond

When a job opportunity raises any doubt — even a small one — here is how to investigate it methodically, before providing anyone with anything.

Cross-reference the recruiter on LinkedIn.

Search independently for the person's name plus the company name. Does their profile exist outside of the message they sent you? How long has the account been active? LinkedIn shows the month an account was created — profiles under 90 days old warrant additional scrutiny. Examine their connections: do they share mutual contacts with genuine employees of that company, or do their connections look like other generated profiles?

Verify through the company's official website — found independently.

Go to the company's website via a direct Google search. Do not use any link the recruiter provided. Navigate to their Careers or Jobs page and confirm whether this position is listed. If it is not, call the company's main phone number — again, found via their official website — and ask to speak with HR or Talent Acquisition. Ask them directly to confirm the role exists and whether the recruiter is on their team. Legitimate companies can confirm this in under two minutes.

Check the email domain character by character.

Open the company's official website and look at their actual domain. Now compare it, letter by letter, to the email address you received. Lookalike domains often substitute characters that appear similar — a zero for the letter O, an extra hyphen, or an appended word like "-hr" or "-global." These are registration tricks designed to survive a quick glance.

Search for the listing on major job boards.

Run the job title and company name through Indeed, LinkedIn Jobs, and the company's own careers page. If the only place this role exists is in your inbox, that matters.

Run a full investigation with Scamanot.

This is exactly the scenario Scamanot was built for. Paste the recruiter's name, company, email address, or the full text of the job offer into Scamanot.com and let the SI investigate it from multiple angles at once — cross-referencing public records, identifying domain registration anomalies, analyzing language patterns associated with fraud operations, and surfacing anything that does not hold up to scrutiny. Your search is never stored. Your data is never shared. It just investigates.

If You Have Already Responded

If you have already provided personal information to a fraudulent recruiter — especially financial information or your Social Security number — act immediately.

Place a fraud alert or credit freeze with all three major credit bureaus: Equifax, Experian, and TransUnion. Report the incident to the FTC at reportfraud.ftc.gov and to the FBI Internet Crime Complaint Center at ic3.gov. If you transferred money, contact your bank or payment provider at once — some transfers can still be reversed within a short window.

You are not naive for having been targeted. These operations are engineered to exploit trust. The people running them study what legitimate hiring looks like, and SI tools have made it dramatically cheaper and faster to reproduce every signal of credibility. The sophistication of the fraud is not a reflection of your judgment.

Investigate First. Every Time.

A job offer that costs you nothing to investigate is worth exactly the time it takes to verify. One that you accept without investigating could cost you thousands of dollars, your identity, or months spent recovering from fraud.

When something does not feel right — or even when it does — investigate it at Scamanot.com before you apply, before you respond, and before you share anything. That is what it is there for.