The AI-Powered Impersonator
Forget the poorly worded emails from a foreign prince. Today’s phishing attacks are crafted by Artificial Intelligence. Scammers use AI to scrape professional details from your LinkedIn profile, company websites, and social media posts. This allows them
to create hyper-personalised emails and messages that are grammatically perfect and contextually aware. They can mimic the writing style of aHR manager, reference a specific project you worked on, or name-drop a senior executive to build instant credibility. These attacks, which can be produced for a few rupees per email, are designed to trick you into clicking malicious links or sharing personal data by looking exactly like a legitimate job-related communication.
The Deepfake Interview
One of the most alarming new threats is the rise of the deepfake interview. Scammers use AI to create realistic video or voice clones of real people. You might think you’re on a video call with a recruiter from a top firm, but you are actually interacting with a scammer using an AI-generated “digital puppet.” Their goal is to either trick you into believing you’ve landed a job and then ask for fees for training or equipment, or to harvest your personal data like Aadhaar and PAN details for identity theft. In some cases, fraudsters even use this tech to have a more qualified person impersonate the candidate to pass technical interviews for a role they are not qualified for.
The QR Code Trap
QR codes are everywhere, from restaurant menus to payment portals, and now, in job scams. Scammers are placing malicious QR codes in fake job postings online, in emails, or even on physical flyers. A quick scan with your phone might seem harmless, but these codes can lead you to a phishing website designed to steal your login credentials or bank details. This method, known as “quishing,” is effective because it bypasses many traditional email security filters that are designed to check for suspicious links, not images. Be cautious of any job application process that heavily relies on scanning a QR code, especially if it creates a sense of urgency.
Platform-Specific Scams: LinkedIn and WhatsApp
Professional platforms like LinkedIn are a primary hunting ground for scammers. They create fake recruiter profiles and post enticing but fraudulent job openings that promise high pay for remote work. Once you apply, they may move the conversation to less secure platforms like WhatsApp or Telegram for the “interview,” which might just be a text chat. A legitimate recruiter will rarely conduct an entire hiring process over text message. These platform-specific scams prey on the trust users have in professional networks and often end with a request for money for a background check or for personal data before a formal offer is even made.
Your 2026 Defence Strategy
Protecting yourself requires a new level of vigilance. First, always verify the job opening. Cross-reference any job you see on a platform like LinkedIn with the company’s official careers page. Second, scrutinise recruiter profiles for inconsistencies and be wary of anyone who refuses to name the company they are hiring for. Third, never pay for a job. Legitimate employers will not ask you for money for equipment, training, or background checks. Be highly suspicious of any communication from a personal email address (like Gmail or Yahoo) instead of a corporate one. During video calls, if the audio is out of sync or the video looks strange, ask the person to perform a simple action like waving a hand in front of their face; some deepfake tools can’t render this correctly. Finally, never share sensitive information like your bank account details or Aadhaar number until you have a signed, verifiable offer letter from a legitimate company.
