How to spot a job scam and protect your search

Scammers target job seekers with convincing job ads and polished emails to steal money and personal data. Here's how to stay vigilant and protect yourself.

How to spot job scams
6 min read

You've been applying for weeks, maybe months. A message pings: "We found your CV and think you're a perfect fit. Click here to confirm your details." Relief, hope, maybe excitement.

But what if it isn't real?

Scammers thrive on moments like these. They pose as recruiters, HR managers or employers, using convincing job ads and polished emails to steal money and personal data. For jobseekers, it can mean weeks of wasted effort, financial loss, or identity theft.

I think we can all agree that job searching is stressful enough without worrying about scammers. Unfortunately, we've seen a significant increase in fake recruiters impersonating our company and other reputable employers, so below is our take on how to stay vigilant.

What are the risks?

The risks of job scams go well beyond losing out on a role. Many victims report direct financial losses, often through fake "training fees" or the classic overpayment trick, where money is sent and then reclaimed once you've returned part of it. Others face identity theft, after handing over passport scans or bank details that can later be used to open credit lines or take out loans in their name.

Even when no money changes hands, scams can waste huge amounts of time and energy. Hours spent chasing interviews or preparing documents for fake recruiters can set back a job search and add to the emotional toll of unemployment. The sense of betrayal can also dent confidence, leaving candidates less likely to trust genuine employers when real opportunities come along.

The modern scam playbook

Today's scams don't rely on clumsy typos or generic "Dear Sir/Madam" messages. They borrow the language of recruitment and exploit the fast pace of job hunting. Some begin with a WhatsApp or text that looks personal, a recruiter who has "seen your CV" and just needs you to confirm your email. Others take the form of professional-looking ads on social platforms or job boards, complete with logos and convincing websites.

Once they have your attention, fraudsters often try to move you onto private chats where they can apply pressure. You may be told that the role is urgent and requires immediate action, or that you need to pay for background checks or equipment before starting. Some go further, sending fake payments into your account and then asking you to "return" part of the money, a tactic known in banking circles as Authorised Push Payment fraud. And increasingly, scammers harvest identity documents under the pretext of "right to work" checks, which in reality follow very specific UK government-approved procedures.

The common thread is urgency and secrecy: a rush to act before you've had the chance to verify anything, often coupled with requests for payment or personal details that no legitimate employer would demand at that stage.

How to check if a role is real

The simplest way to cut through the noise is to start with the source:

If you see a job ad, check the company's official careers page or Welcome to the Jungle profile - if you're with us, head here!

If the role isn't there, ask questions.

It also pays to verify the recruiter:

Email addresses that look close to the real thing (swapping ".com" for ".co.uk" or adding "-careers" to a domain) are a common trick. If you're in doubt, call the company using the number published on its official site and ask to be put through to HR. No genuine business will object.

At Welcome to the Jungle, we never email, text or Whatsapp candidates with messages from recruiters. All messages from recruiters will show in your Welcome to the Jungle candidate account.

Finally, remember your rights. In Great Britain, agencies are prohibited from charging workers fees for finding them work. If someone asks for payment for a DBS check, training, or a starter kit, walk away. And don't feel pressured to hand over ID or bank details until you've had a written offer and a clear onboarding process explained through official channels.

What to do if you suspect a scam

If something feels wrong, pause before responding.

Forward suspicious emails to report@phishing.gov.uk and texts to 7726, a free service that helps block scam numbers.

If you've already sent money, call your bank immediately using the number on your card or banking app. UK banks have agreed to reimbursement frameworks for victims of Authorised Push Payment fraud, but quick action is vital.

You should also file a report with Action Fraud, the UK's national centre for fraud and cybercrime. This generates a reference number that supports any claim with your bank and feeds intelligence to law enforcement. If you've shared ID documents, consider signing up for Cifas Protective Registration, which prompts lenders to run extra checks before issuing credit in your name. And finally, secure your online accounts by changing passwords, enabling multi-factor authentication, and reviewing recent activity.

The red-flag checklist

Keep this list in mind whenever you apply for a role:

  • The job isn't listed on the employer's official careers site

  • The recruiter uses generic or lookalike email addresses

  • You're asked to pay for training, equipment, or "checks"

  • You're pressured to upload ID documents through unfamiliar links

  • You're told to act immediately or keep the process secret

  • The salary or benefits seem too good to be true

  • You're "overpaid" and asked to transfer money back

Smarter habits to protect your job hunt

Prevention often comes down to habits. Make it routine to cross-check jobs with official employer sites, and treat any unexpected messages with caution. Normalise asking questions in the hiring process, and know that genuine recruiters will answer clearly.

Above all, take your time. Most legitimate opportunities survive a 24-hour pause. Scams rarely do.

Bottom line

A genuine hiring process is transparent about who it is, what the role involves, and how the steps unfold. It never asks for money to start work and only requests sensitive documents through recognised, secure routes.

If something doesn't feel right, stop and check. Reporting suspicious activity helps protect not only your own job search, but thousands of others across the UK.