Recruiter Scammers: The Threat Beyond the Fake Job

• Not every recruiter scam asks for money first. Many begin by harvesting CVs, identity data, or role-specific intelligence under cover of a job opportunity (AP News, Business Insider).
• The FTC says reported job-scam losses tripled from 2020 to 2023, and that gamified “task scams” alone topped $220 million in the first half of 2024 — roughly 40% of all 2024 job-scam reports (FTC). Reports to job and employment-agency scams tripled from 2020 to 2024, with losses rising from $90 million to $501 million (FTC).
• LinkedIn now forces workplace verification on anyone adding a recruiter title — a direct product response to hiring-scam pressure (The Verge).
• UK jobseekers are currently hit by unsolicited text and WhatsApp offers promising implausible daily pay; Indeed says it does not phone jobseekers on behalf of employers (The Guardian).
• Magic Circle partners now run on profit-per-equity-partner above £2m, and US-firm London partners far higher (Law Society Gazette, Legal Cheek). At that altitude, a candidate’s “quiet conversation” is monetisable market intelligence. That is why written mandate proof and submission consent matter.

A hard scam follows old fraud logic in new clothes. Someone borrows trust from a real brand, a real law firm, a real recruiter title, or a real platform. AP reporting describes scammers using the names of actual employees at large companies, offering highly attractive remote roles, then moving fast into data or payment requests (AP News). Business Insider’s June 2026 reporting adds the modern wrinkle: scammers now mine public LinkedIn profiles to make outreach look tailored and plausible, while hiding behind Gmail-style addresses, typosquatted domains (an “r” and “n” set to read as an “m”), or off-platform messaging. As Indeed’s workplace-trends editor put it, vague high-pay outreach keeps the details fuzzy “on purpose because specific details would give you something to verify” (Business Insider).

The core patterns are consistent:

• Fake recruiter impersonation. The message arrives out of the blue. The role is vague. The salary is too good. The process moves faster than real hiring allows.
• Fake job or fake law-firm offer. The victim is told the role is real, often confidential, sometimes remote-only, sometimes “urgent.”
• Identity-data theft. The scam asks for passport, tax, visa, bank, or national ID details far too early. The FTC’s expert sources say a legitimate employer needs only your skills, work history, and contact information at the start — the rest waits until after a real offer (AP News).
• Fake-check or equipment play. A check arrives, the “employer” asks you to deposit it and wire money back for equipment, and the check later bounces. One quality-assurance analyst lost $1,000 and had her bank cut ties when the check reversed (AP News).

The legal sector is not insulated. In February 2026, US prosecutors charged a group that allegedly ran a fake law firm — “CM Bufete de Abogados” — staged sham court proceedings, impersonated immigration judges and officials, forged documents bearing US government logos, and extracted fees from vulnerable immigrants. They were charged with wire fraud, money laundering, and false impersonation (The Guardian). That is a hard scam, not recruitment puffery. It also kills the lazy assumption that legal branding filters criminals out. It does not. Legal branding attracts them.

The FTC’s task-scam data shows where this goes at scale. In the first half of 2024, task scams alone produced more than $220 million in reported losses across about 20,000 reports — up from 5,000 in all of 2023 — usually starting with a text or WhatsApp message offering easy online work, with crypto as the payment of choice (FTC). Some victims even get small early payouts. That is not reassurance. That is onboarding. Academic measurement work confirms the industrial logic: a 2026 study that engaged 1,900+ scammers across 29,000+ messages found heavy reuse of message templates, domains, and crypto wallets, with brand impersonation and urgency as standard tooling (arXiv).

At minimum:

At minimum, a legitimate recruiter offers each of the above:

• Real identity tied to a real organisation and a real corporate domain.
• Actual authority to approach you for this role, or a clearly defined search brief.
• Role substance beyond prestige language: team, reporting line, business case, process, likely timing.
• A submission protocol stating exactly when your CV moves and to whom.
• Confidentiality boundaries explaining what stays off-record and what becomes shareable.
• Data discipline on identity documents and sensitive personal data.
• No artificial urgency unsupported by an actual interview process or client instruction.

LinkedIn’s verification change matters here because the platform has now accepted that the old assumption — recruiter title plus polished profile equals legitimacy — is broken (The Verge). If the platform itself wants stronger proof, candidates and firms should want more, not less.