A fake LinkedIn recruiter impersonates a company: how to spot and stop the job scam

How to recognize a fake job or recruiter

A job appearing on a well-known platform does not prove it is authentic. LinkedIn identifies requests for personal or financial information, fees for processing, equipment, or training, pressure to move off-platform immediately, and unrealistic opportunities as warning signs. An incomplete profile alone is not proof of fraud; look for several connected indicators.

Check whether the vacancy appears on the official careers page and contact the company through a phone number or domain found independently. The FTC warns that fake recruiters often use personal email accounts, accelerate hiring, and request sensitive information before a genuine interview. Logos, signatures, and offer letters are easy to copy.

Review the profile's domain, history, connections, photograph, current employment, and internal consistency. Confirm that the email truly uses the corporate domain rather than a lookalike spelling. A verification badge provides an additional signal, but it does not guarantee that the offer is legitimate or replace checking.

• Payment for equipment, training, or processing
• Banking details or identity document before hiring
• Immediate move to WhatsApp or Telegram
• Personal or lookalike email domain
• Exceptional salary and unusually fast process

What the candidate should preserve and protect

Before blocking anyone, save the job URL, profile, messages, emails, attachments, phone numbers, and any website domain. Capture dates and the full conversation. Do not open suspicious files or revisit a phishing page merely to obtain better evidence. Separate confirmed facts from assumptions: the real company may also be a victim.

If you shared a password, change it everywhere it was reused and add stronger authentication. If you disclosed banking details or paid, contact the financial institution immediately through a verified channel. If you sent identity documents, seek official identity-fraud guidance in your country. Never publish those documents as a warning.

Preserve receipts and payment instructions without confronting the actor or hiring another supposed intermediary to recover funds. A new recovery promise may be another scam. Prioritize banks, platforms, and appropriate authorities according to the case.

Report the job and account separately

LinkedIn lets users open the job, select More, and choose Report this job. The scam category covers phishing, malware, personal-data requests, payments, equipment purchases, and pressure to leave LinkedIn. Report the exact asset and select the reason matching observable facts.

The supposed recruiter's account needs another report. From the profile, select Report or Block and choose impersonation or not a real person where appropriate. A fraudulent job, fake profile, and private message are different objects; reporting only one can leave the others active.

Do not organize false or mass reports. Keep references and decisions. LinkedIn reviews independently and may correct, restrict, or remove content, but no report guarantees an outcome or timeline.

How the impersonated company should respond

Centralize the incident across human resources, security, communications, and legal teams. Collect examples and identify copied employee names, fake domains, jobs, and profiles. Confirm genuine vacancies and whether a corporate system was compromised; external impersonation does not automatically mean LinkedIn or company email was hacked.

Publish a brief warning on the official careers page and verified channels. Explain where jobs are listed, which domains the company uses, and that candidates are never charged for equipment, training, or applications. Do not link to phishing or repeat bank details. Provide a simple way to verify recruiters.

Thank candidates who report the scam, but do not ask them to resend sensitive documents by ordinary email. Record contacts with data minimization. Do not promise reimbursement for a transaction the company does not control or claim a victim count without confirmed information.

Reputation, search, and monitoring

Search brand variants combined with employment, jobs, recruiter, and copied names. Preserve results and report domains or accounts through the matching process. A LinkedIn removal does not automatically erase copies in messaging apps, other job boards, Google, or social networks.

Communication should protect candidates rather than defend corporate pride. Acknowledge unauthorized identity use, describe practices the company never uses, and direct people to an authentic source. Avoid public accusations about the actor without verifiable evidence.

Measure actions and outcomes separately: reports and warnings versus removals, fewer inquiries, and corrected search results. Set a monitoring period. A removal does not identify the scammer, and no provider controls every channel.

Spain, the United States, and international reach

In Spain, candidates and companies can seek guidance from INCIBE and appropriate authorities when phishing, fraud, unauthorized access, or impersonation is involved. Data protection may matter where personal information was exposed, but duties depend on the case. This article is not legal advice.

In the United States, the FTC recommends verifying the recruiter and company through known channels and accepts reports at ReportFraud.ftc.gov. Victims may also need their bank, identity providers, or authorities. A LinkedIn report does not replace those steps.

For a confidential assessment, provide public links, names used, and a redacted timeline. Do not send passwords, bank numbers, or complete documents. ReputationGeo.ai can organize evidence, reports, warnings, and monitoring, but cannot guarantee removal, actor identification, or recovery of funds.

How to turn this guidance into a responsible plan

Begin with evidence, not assumptions. Save the exact URLs, screenshots, publication dates, search phrases, review profiles and AI answers that are creating concern. Record where each item appears, who controls the source and whether the information is inaccurate, outdated, private, misleading or simply unfavorable. These distinctions matter because removal, correction, response, suppression and monitoring are different remedies. A credible adviser should explain those differences before recommending work or discussing timing.

Next, define the audience and the decision at risk. A result seen by prospective clients in Spain may require different language, sources and local signals from a result affecting investors in the United States. Decide which names, brands, locations and search questions matter most. Prioritization prevents a campaign from becoming a vague attempt to control the internet and turns it into a measurable program focused on accuracy, trust and discoverability.

Evidence, people and measurements to prepare

Create a baseline before changes begin. It can include the first two pages of Google for agreed searches, ratings and review volume, visibility of owned pages, recurring themes in AI answers and the status of platform or publisher requests. Keep personal data to the minimum necessary and share sensitive documents only through an agreed secure process. If a legal right may apply, involve qualified counsel in the relevant jurisdiction; reputation strategy does not replace legal advice.

Assign an owner for approvals, factual verification and customer responses. Review progress consistently, but do not judge the program by one daily ranking. Useful measures include corrected or removed items, response completion, the share of credible owned and independent sources, search-result composition, branded query trends and whether public information answers real questions. The objective is a more accurate and resilient digital record, not an artificial promise that criticism will disappear.

Keep a decision record, not just a list of links

For every material item, record the exact source, the factual concern, the person responsible for verification, the proposed route and the reason that route is proportionate. Include the date of any request, response deadline, platform reference number and next review date. This record prevents duplicate or contradictory reports and helps a new decision-maker understand why an item was corrected, challenged, answered, monitored or left alone.

A sound record also separates confirmed facts from interpretations. Label legal questions for qualified counsel, service failures for operational owners and public explanations for communications review. If an item changes, preserve the before-and-after evidence without collecting more personal data than necessary. This discipline is especially important when search engines and AI systems update unpredictably: it shows what actually changed and avoids claiming credit for movements that may have several causes.

• Source, URL, date and affected search or prompt
• Verified facts, disputed claims and supporting evidence
• Chosen route, owner, status and next review date
• Privacy, amplification and escalation risks