What if the recruiter used my real name and the correct job title?

That doesn't confirm legitimacy on its own. AI-written phishing and scrapers can pull your name and the exact role you applied for from a job posting or your public profile. Personalization makes an email look more convincing, not more trustworthy — still verify through the company's own site.

Is it safe to reply and ask the recruiter questions?

Asking questions is fine, but don't rely on the answers alone to decide. Verify the recruiter and the role independently by contacting the company through a phone number or email address you found yourself, not one supplied in the suspicious message.

How is this different from spotting a fake job posting?

A fake posting is a listing that was never a real opening, and you'd catch it before applying. This is about a specific email or offer you've already received, often after applying, where you need to confirm the person and process are genuine rather than the listing itself.

What should I do if I already shared personal or financial information?

Contact your bank immediately if you shared account details, watch for unauthorized charges, and report the incident to the FTC at ReportFraud.ftc.gov. Change any passwords you may have reused and consider a fraud alert with a credit bureau if you shared a Social Security number.

How Can You Tell If a Recruiter Email Is a Scam?

Q: Is this job offer a scam?

Check the sender's actual email domain, not just the display name, and be wary of any offer, contract, or paperwork that arrives before a real interview. If the email asks for money, gift cards, or banking details before you've spoken to anyone on a call, treat it as a scam and verify independently through the company's official website.

Listen to this article

You open your inbox to a message from a "senior talent partner" at a company you applied to three weeks ago. It offers you a role you don't remember interviewing for, a salary above what the posting listed, and a Google Form asking you to confirm your bank details before the "onboarding call" tomorrow. The logo looks right. Your stomach does the thing where it wants to believe it.

Knowing how to tell if a recruiter email is a scam usually takes under ten minutes, working through the same handful of checks each time. It's a different question from working out whether a job posting itself is fake before you apply — that's covered separately in how to spot fake job postings — because here you already have a specific email or offer in hand, and you need to know whether to trust it.

Part of what makes this a bigger problem in 2026 than a few years ago is that the emails themselves have gotten better. AI-written phishing means the grammar is clean, the tone matches a real recruiter, and the message often uses your actual name and the exact job title you applied for, scraped from a posting or your public profile. A well-written email is no longer proof of anything — it's exactly what you'd expect from the current wave of ai job scams. The FTC has been tracking this shift as reported losses climb.

How to tell if a recruiter email is a scam, step by step

A single envelope lifted at an angle from a neat stack of identical envelopes, with a magnifying glass over its corner revealing a patch of jagged, broken ruled lines where the rest of the pattern stays orderly — fine navy line art on a pale ground with one electric blue accent on the lens.

Run through these checks in order. Most scams fail at step one or two, so you rarely need to go further.

1. Check the actual sending address, not the display name

Your email client shows a name like "Sarah Chen — Talent Acquisition." That name is decoration. Click or tap it to reveal the real address underneath. A legitimate recruiter emails from the company's own domain — sarah.chen@acmecorp.com, not sarah.chen.hr@gmail.com or a domain that's almost right, like acme-corp-hr.com or acmecorp-careers.net. Look-alike domains are one of the most common tells in a fake job offer email.

2. Ask whether you actually expected this

If you applied for the role three weeks ago, a reply is plausible. If the message is fully unsolicited — you never applied, never posted your resume anywhere near this company, and you're suddenly offered a job — that alone is worth treating as a red flag, not a compliment.

3. Look for the offer-before-interview pattern

Real hiring involves a conversation. If you're offered a job, sent a contract, or asked to buy equipment before anyone has actually spoken with you on a call, that is close to a universal sign of a scam. Genuine employers do not skip the interview.

4. Check what the email is actually asking you to do

This is the fastest way to answer "is this job offer a scam" for yourself. Never send money, buy gift cards, cash a check and wire back the difference, or hand over a bank account or Social Security number before you've been through a real interview process with a company you've independently confirmed is real.

5. Verify independently, using contact details you found yourself

Don't call the phone number in the email or click the "verify your identity" link. Instead, open a new tab, go to the company's actual website, find their careers page or main switchboard number, and ask them directly whether this recruiter and this role exist. This single step catches almost everything else combined.

6. Notice the AI tells

Watch for messages that are grammatically flawless but strangely generic about the actual work — plenty of enthusiasm, very little detail about the team, the manager, or the day-to-day. Urgency is another tell: "respond within 24 hours or we'll move to the next candidate" is a pressure tactic, not a scheduling constraint. If the entire interview happens over chat or a messaging app instead of a call or video, treat that as suspicious too.

7. Keep scam email isolated from the start

The checks above work after a scam has already landed in your main inbox, mixed in with your real applications. It helps to make that harder to happen at all. If you apply for roles through an address dedicated to job applications rather than your everyday one, a scam email is easier to spot on sight and easier to ignore, because it isn't sitting next to your bank statements and your family in the same place. Erioun's Email Hub gives each application its own address, so replies file themselves against the right role automatically, and you can optionally forward messages both ways without ever exposing your real address to the other side.

8. If it fails, report it and move on

You don't owe a scam recruiter a polite decline. Stop replying, don't click anything else in the message, and report it to the FTC. If you already shared financial details, contact your bank immediately.

What this doesn't replace

None of this tells you whether a role is a good fit, only whether the person emailing you is who they claim to be. For judging the posting itself before you apply — vague responsibilities, pay ranges that don't add up, listings that have been "actively hiring" for months — see red flags in job postings and job quality signals.

It also won't catch every case. Some scams clone a real employee's name and photo convincingly. When you can't fully confirm it either way, the safe move is the same one every time: don't send money or personal financial information until you've spoken to a real person at the company through contact details you found yourself.