Is That Recruiter Message Real? A Step-by-Step Verification Checklist

Quick answer

Verify an unexpected recruiter message by contacting the employer through a website or phone number you find independently—not through the message. Confirm both the recruiter’s identity and the claimed vacancy before sharing sensitive information. Do not pay for a job or deposit a check and forward money. A logo, interview, professional profile or offer letter is not enough to establish that the sender is genuine. (consumer.ftc.gov)

This checklist is for applicants assessing an unfamiliar email, text, social-media message or recruitment approach. The verification steps are broadly useful; the reporting routes below are primarily for readers in the United States.

1. Pause before replying, clicking or sending documents

An unexpected approach is not automatically fraudulent. The FTC explicitly notes that not every unsolicited recruitment contact is a scam. The safer response is to verify independently before engaging—not to decide from the message’s appearance alone. (ftc.gov)

For a vague, unexpected text offering remote work and asking you to reply “YES” or “INTERESTED,” do not reply just to find out more. An April 2026 FTC alert identifies that approach as a route into fake-check and task scams. Research the supposed employer separately instead. (consumer.ftc.gov)

Before taking another step, make a short verification record:

• Where and when the message arrived.
• The sender’s full email address, phone number or profile address.
• The claimed employer and any recruitment agency.
• The job title, location and vacancy reference, if supplied.
• What the sender wants you to do next.

Keep the original message for reference. Treat links, attachments and contact details supplied by the sender as unverified. The FBI warns that fraudulent listings can direct applicants to websites, email addresses and phone numbers controlled by scammers. (ic3.gov)

2. Verify the employer and the person separately

A real company does not prove a real recruiter. The FBI has documented scammers using actual employees’ identities and copying legitimate job advertisements while changing the contact information. Finding a matching name or company logo therefore does not complete the check. (ic3.gov)

Use this sequence:

1. Search for the employer independently, rather than following the message’s link.
2. Find its official careers or contact page.
3. Use an independently located company contact to ask whether the named person is recruiting for it.
4. Give the sender’s exact email address and the claimed vacancy details—not just their display name.
5. If the person claims to represent an agency, verify the agency and their connection to it separately.

This puts the FTC’s central recommendation into practice: contact the company using information you know is legitimate, not information supplied by the person approaching you. (ftc.gov)

You can use this wording with the independently located contact:

“I received a recruitment message from someone using this name and email address about this role. Can your recruitment team confirm whether the person and opportunity are authorized?”

Search the company and recruiter names with words such as “scam” or “complaint” as a supplementary check. However, no complaints does not guarantee that an organization is honest. Do not substitute a clean search result for direct confirmation. (consumer.ftc.gov)

3. Check the vacancy through official hiring channels

Next, establish whether the opportunity itself is genuine. The FBI recommends checking third-party job postings against the employer’s own website or with legitimate HR representatives. (ic3.gov)

On the independently located careers page, compare:

• The job title and reference number.
• The location and remote-work arrangement.
• The main duties and required experience.
• The application route.
• Any published recruitment-fraud warnings.

Do not stop at “a similar job exists.” Ask whether the message refers to that specific vacancy and whether its proposed next step belongs to the employer’s process. A copied advertisement can contain genuine duties while directing you to a fraudulent contact. (ic3.gov)

If you cannot find the role, mark it unverified rather than making an immediate accusation. Ask an official recruitment contact whether it exists and how candidates should proceed. If nobody can confirm it, do not send money or sensitive documents while waiting. Independent confirmation—not the sender’s explanation—should determine your next step. (consumer.ftc.gov)

A useful application-tracker entry is:

Verification pending: employer contact located independently; recruiter and vacancy confirmation requested; no sensitive information sent.

4. Examine the address and hiring process—not just the presentation

Recruiters generally use corporate rather than personal email accounts, according to the FTC. A personal address is a reason for caution, but an official-looking address is not a guarantee: the FBI warns about lookalike domains and spoofed company websites. (consumer.ftc.gov)

Expand the sender details and compare the full address with the employer’s independently located website. Look carefully for added words, missing letters or a different domain. Do not rely on the display name above the message.

Also assess the process. The FTC lists text-only or email-only interviews, unusual salary claims, requests for account information and poor spelling among possible warning signs. It also cautions that there is no sure-fire detection method. Treat these as reasons to investigate, not a scoring formula in which several reassuring details cancel out one dangerous request. (ftc.gov)

Two common mistakes deserve particular attention:

• Trusting polished paperwork. Scammers use formal-looking invitations, job descriptions and offer letters.
• Trusting the browser padlock. HTTPS does not establish that the organization behind a website is genuine; criminals can use it too. (consumer.ftc.gov)

The practical question is: Has an independently reached employer contact confirmed this person, role and next step?

5. Stop when the conversation turns to money or premature sensitive-data requests

Do not pay a recruiter for the promise of employment. The FTC warns about supposed equipment or training invoices, including requests to pay first and receive reimbursement later. Honest placement firms typically receive their fee from the hiring company rather than the candidate. (consumer.ftc.gov)

Stop if the sender asks you to:

• Pay to secure the role or release your earnings.
• Deposit a check and send part of the money elsewhere.
• Use money from that check to buy gift cards.
• Deposit your own money to continue paid online tasks.

These match job-scam patterns described by the FTC. Money appearing in your account does not make a deposited check safe; a fake check can bounce, leaving you responsible for repayment. (consumer.ftc.gov)

Be equally careful with Social Security numbers, identity documents and banking details. The FTC warns about scammers requesting these before an interview, sometimes presenting the request as employment paperwork or direct-deposit setup. (consumer.ftc.gov)

This does not mean genuine employers never need sensitive information. The FBI distinguishes legitimate post-hire payroll requests from unverified recruitment demands. Before submitting anything sensitive, independently confirm who needs it, why it is required at that stage and which submission channel the employer authorizes. An offer letter alone does not settle those questions. (ic3.gov)

6. Worked example: verify a suspicious message without engaging

The following message and outcome are entirely fictional. They do not describe a real employer, recruiter or vacancy.

“Hello! We found your profile and selected you for a remote administrative role. No interview is needed. Reply YES today. Send a photo of your ID and your bank details to activate payroll. We will email a check so you can purchase equipment from our approved supplier.”

Here is how to handle it.

First, identify the requests. The sender wants a reply, identity documents, banking details and participation in an equipment-payment arrangement. Do not reply or submit anything while checking.

Second, investigate outside the message. Search independently for the claimed employer. Find its official website and recruitment contact without using the supplied link or phone number.

Third, ask specific questions. Request confirmation of the sender’s exact address, the role, the claimed selection and the equipment arrangement.

Fourth, record the result. Suppose the independently reached recruitment team says the message is unauthorized. Save that confirmation alongside the original message, report the account and block it.

If the employer does not respond, the result is still unverified, not “probably safe.” There is no need to continue just to prove fraud.

The fictional message combines warning patterns identified by the FTC: reply-to-start job texts, premature requests for financial information and checks followed by instructions to spend or transfer money. Its persuasive wording does not change those risks. (consumer.ftc.gov)

7. If verification fails—or you already shared something

If the employer denies the approach, stop communicating. Report the message or listing to the platform where it appeared and alert the impersonated company. The FBI recommends both steps for hiring-scam victims. Preserve the message and verification record before blocking the sender. (ic3.gov)

If you have already acted, match your response to what happened:

• Sent money or shared banking details: contact your bank or payment provider immediately. Explain the suspected fraud and ask whether the transaction can be stopped or reversed. Recovery is not guaranteed.
• Shared a password: change it, change it anywhere else you reused it, and enable two-factor authentication.
• Shared your Social Security number: follow the FTC’s identity-theft guidance. Its recovery page distinguishes confirmed misuse from situations where misuse is unknown. (consumer.ftc.gov)

For U.S. reporting, use the FTC’s ReportFraud service. Suspected internet-enabled crime can also be reported to the FBI’s Internet Crime Complaint Center (IC3). These are reporting routes, not promises of investigation or reimbursement. Outside the United States, consult your local consumer-protection or cybercrime authority. (consumer.ftc.gov)

8. Keep this final recruiter-verification checklist

Before moving forward, check that you can answer yes to each relevant point:

• I found the employer’s contact details independently.
• I checked the sender’s exact identity, not only their name or photograph.
• I confirmed the vacancy through the employer’s site or legitimate recruitment team.
• I know the employer’s authorized next step.
• I am not being asked to pay for employment or forward money from a check.
• I have verified any sensitive-information request and its submission channel.

If an important answer is missing, pause. These checks put official FTC and FBI advice into a repeatable process; they are not a guarantee that every future interaction will be safe. Recheck whenever the conversation introduces a new payment request, document request or unfamiliar website. (consumer.ftc.gov)