Job Portal Phishing and Data Harvesting
Verdict: Suspicious | Risk Score: 8/10 | Severity: high
Category: WhatsApp, KYC, Job
How Job Portal Phishing and Data Harvesting Works
Overview: Fake job portal phishing is a widespread scam targeting millions of Indian job seekers who submit resumes on popular platforms. Scammers post bogus listings on trusted sites like Naukri, LinkedIn, Indeed, and Facebook Jobs, luring applicants into sharing sensitive personal data under the guise of job application or screening processes. Data harvested through these means can be used for identity theft, loan fraud, or further social engineering attacks. With unemployment rising, the sense of urgency makes this scam highly effective and dangerous. How It Works: Fraudsters create fake employer profiles and job ads promising attractive pay or remote work. They swiftly collect CVs, then reach out via WhatsApp or email to request additional details—Aadhaar, PAN, educational documents, bank account info, or even selfies "for verification". Sometimes, candidates are sent links mimicking application forms or Zoom invites, designed to collect more data or inject malware. Some scammers even conduct mock video interviews to extract further information about the candidate and their family. India Angle: This scam flourishes in metropolitan areas—Delhi NCR, Bengaluru, Hyderabad, Chennai—where job competition is fierce. Younger candidates, freshers, and remote-job aspirants are the most vulnerable. Fraudsters specialise in Indian employment patterns, referencing known companies and using colloquial templates. Real Examples: "You are shortlisted for WFH Data Entry. Please send scanned copy of Aadhaar, PAN, and your latest selfie for KYC." Or "Apply for Flipkart Delivery Jobs—Fill form at (suspicious link)." A fake HR schedules a video interview asking about candidate's digital life and family background, subtly collecting exploitable information. Red Flags: - Recruiters insisting on full KYC before confirmed offer - Job application forms not on the official job site - Free Gmail/Yahoo/Outlook recruiter emails - Requests for personal photos or financial details upfront - Suspiciously short interview processes or no real job description Protective Measures: Never share sensitive documents with unverified recruiters. Always confirm the job opening through the official company careers page or direct HR contacts. Ignore interview requests or forms not originating from company domains. Regularly monitor your credit and Aadhaar for misuse. Install reliable security software to avoid malware. If Victimised: Change passwords for all affected accounts. Notify your bank and freeze accounts if financial data is compromised. File complaints with cybercrime.gov.in, the NCIIPC, and inform the job portal about the fake employer to safeguard others. Related Scams: Fake work-from-home training fee scams; WhatsApp job application data theft; Online interview malware attacks.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Job Portal Phishing and Data Harvesting Target?
General public across India
Red Flags — How to Identify Job Portal Phishing and Data Harvesting
- Recruiter asks for full KYC or documents before offer
- Interview links or forms not on official company domains
- Emails from free email providers (Gmail/Yahoo)
- Requests for Aadhaar, PAN, or bank info for 'verification'
- No official job description shared
What To Do If You Encounter Job Portal Phishing and Data Harvesting
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report Job Portal Phishing and Data Harvesting in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is Job Portal Phishing and Data Harvesting?
- Overview: Fake job portal phishing is a widespread scam targeting millions of Indian job seekers who submit resumes on popular platforms. Scammers post bogus listings on trusted sites like Naukri, LinkedIn, Indeed, and Facebook Jobs, luring applicants into sharing sensitive personal data under the guise of job application or screening processes. Data harvested through these means can be used for identity theft, loan fraud, or further social engineering attacks. With unemployment rising, the sens
- How does Job Portal Phishing and Data Harvesting work?
- Overview: Fake job portal phishing is a widespread scam targeting millions of Indian job seekers who submit resumes on popular platforms. Scammers post bogus listings on trusted sites like Naukri, LinkedIn, Indeed, and Facebook Jobs, luring applicants into sharing sensitive personal data under the guise of job application or screening processes. Data harvested through these means can be used for i
- How to protect yourself from Job Portal Phishing and Data Harvesting?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report Job Portal Phishing and Data Harvesting in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.