Malicious Link Data Theft by Fake Recruiters

How Malicious Link Data Theft by Fake Recruiters Works

Overview: This scam involves fake recruiters sending 'job application' links to Indian job seekers, resulting in personal data theft. Criminals pretend to represent legitimate firms, sharing URLs that secretly collect passwords, Aadhaar details, or banking info. This scam is dangerous as victims may not realize their information is being misused until financial or identity crimes occur. How It Works: 1. The scammer approaches via LinkedIn or email, offering an attractive job opportunity. 2. The recruiter requests the candidate to "formally apply" through a provided link. 3. The destination site mimics the employer’s career page but runs on http:// or unfamiliar domains. 4. Candidates are prompted to enter sensitive information—address[ADDRESS_REDACTED]. 5. This information is captured and exploited for fraud, either directly or sold on the dark web. India Angle: Targeted widely across metros and Tier-2 cities, this scam thrives because many Indians use the same passwords for job portals, banking, social media, and UPI apps. Links are often disguised as ‘career applications’ and circulated in English, Hindi, or local languages via WhatsApp or SMS, aside from LinkedIn. Real Examples: - A Mumbai-based MBA is told to “complete your profile to proceed” via a link sent by ‘Zepto HR.’ She enters her PAN and Aadhaar—soon after, her Aadhaar is misused for a fraudulent loan. - Chennai graduates receive application links asking for their bank account and OTP “for salary processing.” Red Flags: - Links sent over WhatsApp, SMS, or LinkedIn that aren’t on official company domains. - Website begins with http:// rather than https://. - Requests for ID proof, Aadhaar, or banking details before any official procedures. - Unsolicited high-paying job offers requiring immediate private info sharing. Protective Measures: - Only submit sensitive information through official company career portals (always check domain names). - Never share Aadhaar, PAN, bank account, or passwords online unless absolutely certain. - Avoid clicking unknown links, especially from new contacts on job sites. - Use a unique password for each online account. If Victimised: - Change passwords for all affected accounts immediately. - Monitor bank transactions and freeze accounts if suspicious activity occurs. - Report the scam on cybercrime.gov.in and contact 1930. Related Scams: - Phishing attacks via job portals. - Lottery or government subsidy scams requesting direct submission of KYC details. - Social media ‘verification’ scams.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Malicious Link Data Theft by Fake Recruiters Target?

General public across India

Red Flags — How to Identify Malicious Link Data Theft by Fake Recruiters

• Job application links not on official domains
• Requests for Aadhaar, PAN, or bank details before hiring
• Websites sent via WhatsApp or SMS (not official email)
• HTTP (not HTTPS) website links
• Unsolicited promises of high salary

What To Do If You Encounter Malicious Link Data Theft by Fake Recruiters

1. Do not click any links or share personal information
2. Block and report the sender immediately
3. Report at cybercrime.gov.in or call 1930
4. Inform your bank if financial details were shared

How to Report Malicious Link Data Theft by Fake Recruiters in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Malicious Link Data Theft by Fake Recruiters?

Overview: This scam involves fake recruiters sending 'job application' links to Indian job seekers, resulting in personal data theft. Criminals pretend to represent legitimate firms, sharing URLs that secretly collect passwords, Aadhaar details, or banking info. This scam is dangerous as victims may not realize their information is being misused until financial or identity crimes occur. How It Works: 1. The scammer approaches via LinkedIn or email, offering an attractive job opportunity. 2. The

How does Malicious Link Data Theft by Fake Recruiters work?

Overview: This scam involves fake recruiters sending 'job application' links to Indian job seekers, resulting in personal data theft. Criminals pretend to represent legitimate firms, sharing URLs that secretly collect passwords, Aadhaar details, or banking info. This scam is dangerous as victims may not realize their information is being misused until financial or identity crimes occur. How It Wo

How to protect yourself from Malicious Link Data Theft by Fake Recruiters?

Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared

How to report Malicious Link Data Theft by Fake Recruiters in India?

Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.