Job Seeker Security Hub

1. 1.

   Beware of unrealistic offers. If a job opportunity sounds too good to be true, it probably is. For example, scammers might promise high pay for minimal effort or a short time commitment, exploiting the desire for quick financial gain.

2. 2.

   Question unexpected offers. Be wary of job offers for positions you didn’t apply for, especially if the hiring process is unusually fast or casual, such as text-based interviews or securing a job by submitting personal or financial information.

3. 3.

   Watch out for repeated communication. When the same job offer reappears multiple times, or with minor changes like a different contact name, phone number or phrasing, it’s likely a scam. Scammers repeatedly adjust details to avoid detection.

4. 4.

   Be cautious of requests for upfront payments or sensitive information. Legitimate opportunities don’t require payments for application processing, securing the job or materials for training. Also, never share sensitive information like bank details or identification documents before receiving a formal job offer.

5. 5.

   Examine vague or poorly written job ads. Scams often lack proper details about the role, responsibilities or requirements. Watch out for poorly worded descriptions, grammatical errors and vague details in the job ad.

6. 6.

   Check for brand inconsistencies. Legitimate job ads of companies clearly display their official company name as the advertiser or social media handle. If the account name seems off or different, treat it as suspicious. Confirm the authenticity of email addresses or phone numbers by cross-referencing the company’s official website.

7. 7.

   Watch out for brand impersonation. Scammers may mimic official branding, such as logos or color schemes, and create fake websites to appear legitimate. Reduce the risk of falling for phishing sites by manually searching for the company’s official website in your browser, instead of clicking on links in emails or messages.

1. 1.

   Verify the sender’s email address. Legitimate companies typically use branded email domains to reinforce their identity. For instance, Jobstreet’s official email domain is @jobstreet.com, @seekasia.com or @seek.com. If you receive an email claiming to be from a company using a generic domain like @gmail.com, or any other domain that doesn’t clearly represent the company, it’s likely to be phishing.

2. 2.

   Notice generic greeting. Legitimate communications from companies will address you by your first name, rather than using your email address or generic terms like "Hi."

3. 3.

   Spot brand inconsistencies. Legitimate companies prioritise maintaining up-to-date branding and consistent styling in their communications to reflect professionalism. If an email features low-resolution logos, outdated branding or incorrect colour schemes, it may be phishing.

4. 4.

   Question vague information. Scammers keep the email subject and email body vague to induce your sense of curiosity to trick you into clicking on phishing links or downloading malicious attachments.

5. 5.

   Be cautious of urgency and fear tactics. Scammers state a short timeframe to pressure you into acting quickly on their requests, often by threatening negative consequences if you don't respond in time.

📢 Be sure to report any phishing attempts, block the sender, and delete the email.

Scammers may pose as employees of legitimate companies on social media to deceive job seekers. They use these platforms to create fake profiles, impersonate recruiters and gain your trust. Here are tips to stay safe while networking online:

1. 1.

   Validate connections. Be cautious of profiles claiming to represent companies if they:

   • Have a minimal online presence.

   • Appear newly created or outdated.

   • Have very few connections or followers.

   Always verify the legitimacy of such profiles by reaching out to the company directly using the contact details listed on their official website.

2. 2.

   Control your profile privacy. Adjust privacy settings on your social media accounts to reduce visibility to strangers. Restrict who can access details such as your work history, email or other contact information, as scammers can use this information to craft personalised phishing scams.

3. 3.

   Share wisely. Ensure details you share won’t compromise your security or privacy, such as your home address, phone number, etc. Limiting the amount of personal information you make publicly available, reduces the risk of identity theft.

1. 1.

   Verify the company’s legitimacy. Before applying for a job, check if the company is authentic and has an established online presence, such as an official website.

2. 2.

   Avoid including personal information on your resume. Including sensitive information in your job applications such as your ID numbers, medical details or family situation can put you at risk. If such details are necessary, employers will request them once the job offer has been formally made.

3. 3.

   Verify the identity of the interviewer. If you’re suspicious of the communication from the interviewer or representative arranging your interview, reach out to the company through their official channels to verify their legitimacy.

4. 4.

   Beware of Deepfake technology. Be cautious about any discrepancies in the interviewer's appearance or behaviour during a video call. Be familiar about signs of deepfake manipulations, such as unusual facial movements or mismatched audio.

5. 5.

   Avoid downloading suspicious attachments or clicking links. During the hiring process, scammers may attempt to get you to download malicious attachments or click on phishing links under the pretext of sharing application forms, technical tests, and even legitimate tools on open-source repositories such as GitHub and npm, for those applying for developer or tech roles. Only download files from verified company email domains and avoid interacting with links you cannot confirm as legitimate.

6. 6.

   Trust your instincts and ask questions. If something feels suspicious, listen to your gut. Don’t hesitate to ask recruiters why they need certain details or how they will protect your data. A legitimate company will have clear responses.

Email

• Verify that it’s from Jobstreet’s legitimate domain (@jobstreet.com, @seekasia.com or @seek.com).

• Ensure the content is professionally formatted and is detailed. Poor spelling or grammar and vagueness is a sign of phishing.

Call

Verify if it matches Jobstreet's official phone number (+6288 977885888 or +6202 180825888).

Text Message

Jobstreet will not reach out to you via text message.

Social Media

• Jobstreet does not typically contact candidates via social media platforms such as Instagram, Facebook or Twitter.

• Jobstreet’s Talent Acquisition team will always use official @jobstreet.com, @seekasia.com or @seek.com email addresses for formal communications. If you receive any suspicious messages claiming to be from our team, contact Jobstreet to verify.

🤝 We’re here to help. If you are still unsure, contact Jobsdb on +6288 977885888 (Mon to Fri, 8:00am – 5:00pm) or via email at [email protected] to verify.

If available, please provide the following details to help us better assist you:

• Date and/or time of incident

• Contact method used by scammer

• Screenshot of any emails 

• Phone numbers or screenshot of call log   

• Screenshot or copy of any messages

• Screenshot or link of any websites

• Job Id, job title or company name of the fake job ad 

• Screenshot of the fake job ad 

• Description of what happened

• Any of your information obtained by the scammer so far