Recruitment fraud sits at the intersection of HR, security, legal, and corporate affairs. Scammers may impersonate reputable employers to obtain money, personal information, or both, and they can reach job seekers through job sites, social media, email, or text [1][
3].
For corporate communications, the goal is not simply to say something quickly. The goal is to protect candidates, preserve trust, avoid overstatement, and choose the channel that matches the actual risk.
The recommended communications stance
If the evidence points to a single reported impersonation attempt and there is no sign that the scam is still active or spreading, the strongest reputation-management response is a measured owned-channel approach:
- Add or refresh a recruitment-fraud notice on the careers site.
- Add short verification language to Greenhouse, job-board pages, and active job posts where possible.
- Align HR and Talent Acquisition on one approved candidate response.
- Preserve evidence and coordinate with Legal, IT/Security, and the relevant platform.
- Prepare a LinkedIn statement, but hold it unless the issue escalates.
This is not silence. It is channel discipline. Candidates who are checking whether a job is legitimate are most likely to look at the company careers site, the job posting, or the recruiter communication trail. That is where the warning should appear first.
Why an immediate LinkedIn post may be the wrong first move
A public social post can be appropriate when a scam is active, widespread, or already generating public concern. But when the issue appears contained, a broad LinkedIn statement can unintentionally draw more attention to a fraudulent profile or fake role than the scam itself has received.
Use LinkedIn as an escalation channel when there is a clear candidate-protection need, not as the default first response. The company can still act quickly by updating owned channels and briefing teams.
What the evidence says about recruitment scams
The risk is real. The FTC says job scammers may pose as recruiters for well-known employers, move quickly, and try to obtain money, personal information, or both [1]. The FTC also notes that scammers advertise fake jobs in many of the same places legitimate employers do, including online job sites and social media [
3].
Employer-facing guidance also identifies warning signs that match typical impersonation cases: HR may receive calls or emails about job postings that do not match current openings, applicants may ask to verify offers or interview schedules, and fake websites may use lookalike domains or words such as careers or hiring alongside a company name [2].
Several companies address this through standing candidate notices. Atlassian warns candidates about unauthorized recruiting agencies or people impersonating Atlassians, including fake jobs on employment sites and communications that mimic its careers site or company email addresses [4]. Allstate describes recruitment fraud as fictitious job opportunities that may appear through unsolicited emails, online recruitment services, bogus websites, LinkedIn, or text messages, typically to obtain personal information or money [
8].
Decision guide: when to use which channel
| Situation | Recommended communications response | Why |
|---|---|---|
| One reported fake recruiter profile, no current evidence of spread | Careers-site notice, job-board banner, internal HR/TA note | Protects candidates at verification points without amplifying a contained issue. |
| Candidate asks about a role that is not open | Candidate holding response and evidence collection | Employer guidance flags HR inquiries about unmatched job postings as a warning sign [ |
| The scam asks for fees, banking details, IDs, or sensitive personal information | Escalate internally and strengthen candidate warnings | Job scams often seek money, personal information, or both [ |
| Multiple fake profiles, fake domains, forged documents, or brand/logo misuse appear | Public LinkedIn post plus platform reporting and owned-channel updates | Fake websites, mimic emails, and impersonation are common patterns in recruitment fraud notices and employer guidance [ |
| Media, social chatter, or candidate concern increases | Publish the prepared public statement | At that point, a visible public correction may reduce confusion and show candidate care. |
What to publish now: careers-site notice template
Use this as a website or careers-page notice. Replace all placeholders and confirm every process claim with HR, Legal, and Talent Acquisition before publishing.
Recruitment fraud notice
[Company] is committed to a fair, transparent, and secure recruitment process.
Job seekers may occasionally be contacted by individuals falsely claiming to represent legitimate employers. Scammers may advertise fake jobs through job sites, social media, email, or text, and may seek payment, banking details, or personal information [1][
3].
All legitimate [Company] opportunities can be verified through [official careers portal]. Our recruiting team contacts candidates through [authorized channels and official email domains].
[Company] will never request payment, banking details, or sensitive financial information as a condition of applying, interviewing, or receiving an offer. Use this sentence only if it is fully accurate for your process.
If you are contacted about a [Company] role that is not listed on [official careers portal], or if you are unsure whether a communication is genuine, contact [recruitment email address] before responding.
Short banner for Greenhouse and job boards
A shorter version should appear close to active job listings:
All legitimate [Company] opportunities can be verified through [official careers portal]. Our recruiting team contacts candidates through [authorized channels and official email domains]. [Company] will never request payment or banking details during the recruitment process. If you are unsure whether a message is genuine, contact [recruitment email address] before responding.
Internal HR and Talent Acquisition note
Candidate-facing teams need one version of the facts and one approved response. Keep it practical:
Internal note
We have been made aware of a potential recruitment impersonation issue involving an unauthorized individual or profile claiming to recruit for [Company]. If candidates contact you about suspicious outreach:
- Direct them to verify all roles through [official careers portal].
- Ask them to forward screenshots, profile links, email addresses, phone numbers, messages, and any documents received to [intake email].
- Do not engage directly with suspected fraudulent profiles.
- Escalate repeat reports to Talent Acquisition, Legal, IT/Security, and Corporate Affairs.
- Use only the approved holding response when replying to candidates.
Candidate holding response
Use a calm, helpful response that protects the candidate without speculating beyond confirmed facts:
Thank you for reaching out. All legitimate [Company] roles can be verified through [official careers portal].
If the role you were contacted about is not listed there, please treat the communication as suspicious and do not share payment, banking, or sensitive personal information. Job scams often seek money, personal information, or both [1][
3].
You may forward the message, profile link, email address, phone number, and any related screenshots to [intake email] so our team can review.
LinkedIn statement to hold for escalation
Prepare the statement now, but publish only if there are additional reports, active fake profiles, requests for money or sensitive information, fake domains, forged documents, media interest, or visible candidate concern.
Escalation statement
We have become aware of an unauthorized individual or profile falsely claiming to recruit on behalf of [Company].
To help protect candidates, we want to remind job seekers that all legitimate [Company] opportunities can be verified through [official careers portal]. Our Talent Acquisition team communicates through [authorized channels and official email domains].
[Company] will never request payment, banking details, or sensitive financial information as part of the recruitment process.
If you are contacted about a [Company] role that is not listed on [official careers portal], please treat it as suspicious and contact [recruitment email address] to verify before responding.
Wording and reputation-management guardrails
A recruitment-fraud response should be specific enough to help candidates, but not so dramatic that it creates unnecessary alarm. Apply these edits before publishing anything externally:
- Say all legitimate roles can be verified through the official careers portal if the company also posts jobs on LinkedIn, Greenhouse, JobStreet, or other boards. Do not say roles appear solely on the careers site unless that is strictly true.
- Avoid naming the alleged impersonator publicly unless Legal approves it.
- Avoid posting screenshots or profile links that could drive candidates toward the fraudulent account.
- Use singular language if there is only one known profile. Do not say unauthorized individuals if the evidence points to one individual or account.
- Do not imply a breach, data exposure, or wider campaign unless those facts have been confirmed.
- Use a shared email alias, such as careers@company.com or recruitment@company.com, rather than an individual recruiter inbox where possible.
Bottom line
The right corporate affairs response is proportionate: act quickly, but do not over-amplify. For a contained recruitment impersonation report, publish a clear owned-channel warning, align HR and Talent Acquisition, monitor closely, and keep a LinkedIn statement ready for escalation. If the scam becomes active, widespread, or harmful to candidates, move the public statement from standby to live.



