This week’s featured scam targets those on the lookout for new career opportunities. You might receive an email that looks like it’s from Google Careers, appearing to come from a recruiter who wants to discuss a potential role with you.
At first glance, the message looks legitimate — the branding seems right, and the tone sounds professional. The email includes a link to schedule a meeting, directing you to a page that asks for your name, work email, and phone number.
However, this is not a real recruitment message. It’s a phishing scam designed to collect your personal information and Google login credentials. The scheduling page is a convincing fake, created by cybercriminals to mimic the real Google Careers website. Once you enter your details, you’ll be redirected to a fraudulent login page where your credentials are captured and sent straight to the scammers.
How to Protect Yourself
Verify before you trust. Scammers can replicate real websites down to the smallest detail. Always go directly to an organization’s official website rather than following links in an unexpected email.
Pause before clicking. Even if an email looks authentic, be cautious with links and attachments. Cybercriminals rely on urgency and curiosity to get you to act quickly.
Stay alert beyond Google. These scams aren’t limited to Google Careers. Attackers can impersonate any well-known job site or company to lure you in.
By staying skeptical and verifying every unexpected opportunity, you can keep your data — and your accounts — safe from prying eyes.