How to Spot Fake Job Recruitment Emails Targeting Australian Small Business Owners

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Job Recruitment Emails Targeting Australian Small Business Owners. Follow the steps below to fix the issue.

Common Causes

Fake job recruitment emails are an increasing threat to Australian small business owners. These scams often impersonate legitimate recruitment agencies or job boards, offering fake positions to trick business owners into sharing sensitive business credentials, banking details, or personal identification information. Learning to spot the warning signs can protect your organisation from financial loss and data breaches.

Identifying Fake Recruitment Emails

1. Check the sender email address for misspellings or unusual domains.
2. Hover over links to view the actual URL before clicking.
3. Never reply with business credentials, TFN, or banking information.
4. Report suspicious emails and delete them from your inbox.

Detailed Instructions

1. Inspect the Sender Address

Scammers often use email addresses that look similar to legitimate companies but contain small differences.

• Look for public domains such as @gmail.com, @yahoo.com.au, or @outlook.com instead of a company domain.
• Check for subtle misspellings, such as recruitment-agency.com versus recruitment-agencys.com.
• Verify that the display name matches the actual email address.

2. Look for Generic Greetings and Urgent Language

Fake recruitment emails often use vague greetings and pressure tactics to rush you into action.

• Be cautious of greetings like "Dear Candidate" or "Hello Business Owner" instead of your name.
• Watch for urgent language claiming you must act immediately to secure a role or payment.
• Be wary of job offers for positions you never applied for.

3. Hover Before You Click

Malicious links are commonly hidden behind buttons or text in recruitment scams.

1. Move your mouse cursor over any link in the email without clicking.
2. Check the URL that appears at the bottom of your email client or browser.
3. If the link does not match the organisation claiming to send the email, do not click it.

4. Never Share Sensitive Information

Legitimate recruiters will not ask for the following via email:

• Business login credentials or passwords
• Tax File Numbers (TFN)
• ABN or business banking details
• Copies of passports, driver licences, or other identification

5. Verify the Organisation Independently

1. Search for the recruitment agency or company through an official website, not a link in the email.
2. Contact them using a phone number or email address found on their official website.
3. Ask whether they sent the recruitment email.

What to Do If You Clicked a Suspicious Link

1. Disconnect your device from the internet immediately.
2. Change any passwords you may have entered, starting with your email and business accounts.
3. Run a full security scan using your antivirus software.
4. Open a Ticket with 220 Internet Services for assistance.

Reporting Scams

You can report recruitment scams and phishing attempts to Scamwatch, run by the Australian Competition and Consumer Commission (ACCC), and to the Australian Cyber Security Centre (ACSC) via ReportCyber. Reporting helps protect other Australian businesses from similar attacks.

Still Having Issues?