Fake Job Listings Are Stealing Your Identity

Yesterday I wrote about whether it’s time to shut down the Internet. The core problem: scammers have unfiltered access to people, and the systems meant to protect us aren’t keeping up. This morning I saw a real-world example of exactly that.

This morning I read a post a woman posted on social media that her 17-year-old daughter has been applying for jobs online. The daughter would go through an entire application and interview process with an AI chatbot, then show up at the business for an in-person interview — only to be told that management knows nothing about it. No application on file. No interview scheduled. In some cases, the business wasn’t even hiring.

I didn’t comment on the post. I didn’t want to attract hostility. But what almost certainly happened is that the daughter was interacting with scammers, not employers.

How the scam works

It’s not complicated. A scammer sets up a website that looks like it belongs to a real business — a restaurant, a retail store, a local employer. The site has a “Careers” or “Apply Now” page with a chatbot that walks applicants through what feels like a legitimate hiring process.

The chatbot asks standard-sounding interview questions. Some are what you’d expect: availability, work experience, education history. But mixed in are questions that serve a different purpose entirely.

“Where did you attend elementary school?” is a common security question used to verify identity on bank accounts, email providers, and government portals. The applicant answers it thinking it’s part of a background check. The scammer now has one more piece of the puzzle.

By the end of the “application,” the scammer may have collected:

• Full legal name
• Home address
• Phone number
• Email address
• Date of birth
• Education history (including schools attended — security question gold)
• Employment history
• Social Security number

All given voluntarily by someone who thought they were applying for a job. A 17-year-old going through this process for the first time has no reason to suspect anything is wrong. The site looked real. The chatbot was polished. The questions seemed normal.

In some cases, it may not even be a chatbot. It could be a real person on the other end, pretending to be an automated system. That makes it even more effective, because they can adapt their questions based on the answers they’re getting.

Why it works so well

Job applications have always required personal information. Employers need your name, contact information, and work history. That’s legitimate. Scammers exploit this by mimicking the process exactly — the victim doesn’t question it because the requests seem appropriate for the context.

A job application is also one of the few situations where people willingly hand over their Social Security number to a stranger. Legitimate employers do eventually need it for tax purposes. Scammers know this, so asking for it during the application doesn’t raise the alarm it should.

Young people entering the workforce for the first time are especially vulnerable. They don’t have experience distinguishing legitimate hiring processes from fake ones. They may not know that most real employers don’t conduct interviews through chatbots on external websites. They’re eager to get hired and don’t want to seem difficult by questioning the process.

The chatbot isn’t the only tool

Fake job listings appear on legitimate job boards too. Scammers post openings on sites like Indeed, Craigslist, and Facebook Marketplace. The listing looks normal. The company name might be a real business. The applicant clicks “Apply” and gets redirected to the scammer’s site, or receives an email with a link to “complete the application.”

Some scammers go further. They create fake Google Business listings with phone numbers that route to them. If the applicant tries to verify the job by calling the number they found on Google, the scammer answers and confirms the listing is real.

How to protect yourself and your family

Go to the business in person. If you’re applying to a local employer — a restaurant, a store, a warehouse — walk in and ask if they’re hiring. Talk to a manager. Get the application directly from them. This is the single most reliable way to confirm a job is real.

Don’t trust search results for phone numbers. If you want to verify a job listing, don’t Google the company and call the number that comes up. Scammers can create fake business listings. Instead, find the company’s official website through a source you trust, or visit the physical location.

Verify the website. If someone gives you a URL to apply, look at it carefully before entering any information. Scammers use domains that are close to the real thing — one letter off, a different domain extension, or a subdomain that looks official. When in doubt, go to the company’s website yourself by typing the address you already know, not by clicking a link someone sent you.

Never give your Social Security number on an initial application. A legitimate employer does not need your SSN to decide whether to interview you. They need it after they’ve hired you, for tax paperwork. If an online application asks for it upfront, that’s a red flag.

Watch for security-question-style questions. “What elementary school did you attend?” and “What was the name of your first pet?” are not standard interview questions. They’re security verification questions. If an application or chatbot asks them, stop.

Talk to young people about this. A teenager applying for their first job doesn’t know what a normal hiring process looks like. Walk them through it. Explain what information is reasonable to provide and what isn’t. Tell them that it’s always okay to pause, leave, and verify before handing over personal details.

The bigger picture

This is the Wild West problem from yesterday’s post in action. Scammers can spin up a convincing fake business presence — website, chatbot, job listings, phone number — in hours. There is no verification system that prevents it. There is no authority checking whether the “careers page” on a website actually belongs to the business it claims to represent.

Until that changes, the only defense is awareness. Know what a legitimate hiring process looks like. Verify before you share. And if something feels off, trust that instinct — walking into the business and talking to a real person is never the wrong move.