Fake Recruiter and Job Scam Red Flags: How to Spot a Fake Interview Invite (2026)

Fake Recruiter and Job Scam Red Flags: How to Spot a Fake Interview Invite (2026)

Dubai Police warned jobseekers on 24 October 2026 about fake part-time job offers designed to steal banking details or pull people into illegal financial transactions. Four days earlier, on 20 October, UK cyber firm Bridewell warned that fake recruiter approaches can deliver malware, even to technically skilled engineers, and linked one campaign to an Iran-linked espionage group called Mirage Kitten. The two warnings come from different continents and target different people, but they describe the same trick: a convincing recruiter message arrives at the moment you want to hear from one.

What the Two Warnings Actually Said

Dubai Police (24 October 2026). The Anti-Fraud Centre at the General Department of Criminal Investigation issued the warning under the Ministry of Interior's "A Safe UAE Starts with Your Digital Awareness" campaign. Its advice was to verify the company name and registration through official channels, never pay fees to secure a job, never share banking details or one-time passwords (OTPs) with anyone offering employment, and avoid unfamiliar links sent through social media or messaging apps. It also flagged a specific pattern: being asked to receive money into your personal account and forward it to someone else for a commission. Suspect offers can be reported through the Dubai Police eCrime platform or by calling 901.

Bridewell (20 October 2026). Reported by Security Journal UK, Bridewell said fake recruitment approaches can expose corporate systems to malware, and that organisations whose engineers use external recruitment platforms, particularly in fintech and aviation, should consider themselves potentially exposed. Gavin Knapp of BCON Collective said technical knowledge does not make someone immune to a convincing recruitment approach, and noted that engineers may not report suspicious approaches because they do not want to reveal they are job hunting. Bridewell stressed the technique is not specific to one group.

Neither source gave statistics, so this post makes no claims about how common these scams are. The point is the pattern, and the pattern is easy to defend against once you know it.

Why This Hits Job Seekers Harder Right Now

When you have applied to dozens of roles and heard little back, an enthusiastic message from a "recruiter" feels like relief. Scammers rely on that. Our post on ghosting after interviews covers how silence from real employers is wearing candidates down; a fake recruiter simply fills that silence with attention. The more exhausted you are, the more likely you are to skip the checks below.

Seven Red Flags in a Recruiter Approach

1. Money moves toward the company. Any fee for training, equipment, a background check, a visa or "registration" is a red flag. Legitimate employers do not charge you to hire you. 2. Money moves through you. Being asked to receive funds into your account and pass them on for commission is the pattern Dubai Police specifically called out. 3. Requests for banking details or OTPs before an offer. There is no interview stage at which a real employer needs your OTP. 4. An offer with no real interview. If you are "hired" after a chat message and a few friendly questions, that is not a hiring process. 5. Pressure to leave the platform. Moving instantly to a private messaging app, especially with urgency, is a classic move. 6. Unfamiliar links or files. A "skills test" or "assessment" that requires downloading software or running code is, per Bridewell, something to treat as untrusted. 7. Flattery plus vagueness. A message that praises your profile but never names the actual employer, team or salary band is built to be generic.

A Five-Minute Verification Checklist

Before replying with anything beyond a polite "thanks", do this:

- Find the company yourself. Search for the employer's official website and look for the same role on its careers page. Do not click the link in the message. - Check the contact route independently. Per Bridewell's advice, use contact details you find on the employer's official site, not details the recruiter supplies. - Look for a licence or registration. In the UAE, Dubai Police said legitimate offers come from licensed businesses with verifiable identities and addresses. Ask for the company's registered name and check it through official channels. - Match the email domain. A recruiter from a "major bank" writing from a free webmail address deserves suspicion. - Ask for a video call with a named interviewer and then confirm that person exists in the company through the official site or switchboard.

If anything fails, stop. You do not need to prove it is a scam; you only need to fail to confirm it is real.

What to Say to a Suspect Recruiter

You can stay polite and still protect yourself. Copy and adapt these:

To verify: "Thanks for reaching out. Could you share the company's registered name, the role reference on your careers page, and a work email address so I can confirm through the official website before we continue?"

To decline moving platforms: "I'm happy to continue by email or on the original platform until we've had a scheduled interview."

To decline a download: "I don't run external software on my own or any employer devices. I'm glad to do the assessment in a browser-based tool or on a shared screen."

To decline any payment: "I don't pay fees as part of a hiring process. If that's required, I'll step out here."

A real recruiter will accept all four without drama. A scammer will push, rush or disappear, and the difference tells you what you need.

If You Are a Developer or Engineer

Bridewell's advice for technical candidates is specific. Treat any external coding assessment as untrusted software and run it only in an approved, isolated environment with no access to credentials, source repositories or sensitive data. Never run one on a work laptop. If you have already downloaded or run something suspicious, contact your security team promptly, even though it means admitting you were exploring other roles. That awkward conversation is far cheaper than a breach.

If You Think You Have Been Targeted

- Stop all contact and do not send documents, ID scans or one-time codes. - Contact your bank immediately if you shared financial details. - Screenshot messages and profiles before they disappear. - In Dubai, report through the Dubai Police eCrime platform or call 901. Elsewhere, report to your national fraud or cybercrime service and to the platform where the approach appeared.

What a Real Process Looks Like

Knowing what is normal makes fakes stand out. A genuine process has a named employer, a job description you can find on an official site, a scheduled interview with named people, and an offer in writing after those steps. If you want a baseline for how a real first conversation runs, our guide to phone screen interview questions walks through it. Practising real interviews also trains your ear: once you have heard what a real recruiter asks and how they structure a call, a message that skips all of it feels off.

Frequently Asked Questions

How can I tell if a recruiter message is fake? Look for money requests, requests for banking details or OTPs, an offer without a genuine interview, pressure to move to a private chat, and links or files you did not expect. Then verify the company and the recruiter through the employer's official website, not through details in the message.

Do real employers ever charge fees to candidates? Dubai Police's advice is explicit: never pay fees to secure employment. As a general rule, a legitimate employer pays you, not the other way around. Treat any request for a training, visa, equipment or registration fee as a reason to stop.

Is it safe to do a coding test a recruiter sends me? Only if you have verified the recruiter and the employer independently. Bridewell advises treating external coding assessments as untrusted software and running them in an isolated environment with no access to credentials or sensitive data, and never on an employer device.

What should I do if I already shared my bank details? Contact your bank right away to block or monitor the account, stop replying, keep screenshots, and report it. In Dubai, use the Dubai Police eCrime platform or call 901.

Does an online interview prove the recruiter is real? No. A video call is a good step, but you still need to confirm the interviewer and employer independently through official channels. Verification is about the company, not the medium.

*Real interviews are the best defence against fake ones, because you learn what a genuine process feels like. Practise out loud with an AI interviewer before the next call. Start free at voxxhire.com.*