Job scams on LinkedIn are not just a threat to the unsuspecting professional; they have a significant impact on business too. NordLayer conducted research on LinkedIn scams encountered by business representatives and the effects they had on affected companies. The report shows over half of the professionals encountered a scam attempt or a fake LinkedIn account. The outcomes vary from reputational damage to infrastructural harm.
Since you already know that LinkedIn scams are a serious business, let's find out how to spot and avoid them.
Contents:
Types of LinkedIn scams
Unlike other popular social media platforms, LinkedIn is filled almost exclusively with professionals. Thus, the cyberthreats you can stumble upon are often distinct from the ones waiting for you on Facebook or any other social network.
Let's get to know the most common LinkedIn scams.
Fake job offers
The recruitment process is possibly the only situation where we willingly give away our personal details. After all, our job search is usually driven by the necessity or hope of finally finding that promising, well-paid job. And then—as the cybercrime story often goes—we find out the offer was, in fact, too good to be true.
Scammers may pose as representatives of legitimate, well-known companies. They might also set up LinkedIn pages of non-existing businesses or offer attractive after-hours gigs.
Before applying for a job on LinkedIn, double-check the profiles of the recruiter and the company they’re representing. Discrepancies and spelling mistakes should raise your doubts. As well as asking for unnecessary sensitive details like Social Security Number or bank account information.
Phishing
On LinkedIn, phishing involves cybercriminals trying to lure you into taking the bait, which usually means clicking virus-containing links, downloading malware or ransomware, and giving away your sensitive information.
Phishing messages are always disguised as coming from legitimate sources. On LinkedIn, hackers may impersonate a recruiter sending you the link to the dream job offer or directing you to the company website, which—you've guessed it—is a total scam.
Hackers, also, often pretend to represent LinkedIn itself, counting on people being used to getting messages from the platform. The platform urges users to report phishing attempts and assures several domains that may have raised doubts in the past, such as [email protected], [email protected], and [email protected] are legitimate.
The best way to protect yourself from LinkedIn phishing is to develop a habit of checking email addresses and senders' identities and never mindlessly clicking on any links or attachments.
Cryptocurrency and investment scams
Who among us doesn't dream of making a fortune overnight, investing in the next big thing, or breaking the bank with cryptocurrency? We all do, and cyber crooks know it. They are also aware they target professionals; that's why scams on LinkedIn are often sophisticated and aimed at building trust first. Unlike scam investment emails filling our spam folders, cyber crooks may direct you to a real investment website first and give you reasonable financial advice for months before asking you to move your funds to their fraud account.
Cryptocurrency scams are a worldwide threat: The number of such scams tripled in the first half of 2022, compared to the same period in 2021.
The promise of unprecedentedly huge returns in a short amount of time should always raise your doubts. Especially if the investment requires using an unknown crypto-exchange platform or cryptocurrency-only payment.
Romance is not the first thing that comes to mind when you think about LinkedIn. However, it's not uncommon to meet your significant other at work, and LinkedIn is a work-oriented networking platform. So what's so wrong about trying to make the connection with someone who piqued your curiosity? Well, the answer should be apparent at this point: You have no guarantee that the profile you're chatting with is a real human. Especially if no common connections are backing up the profile's identity. If you're interested in how scammers seduce LinkedIn members, read about the security expert Roger Grimes's experience.
To stay on the safe side, stick to dating apps when looking for romance. The same applies to friendships: Don't accept connection requests from people you don't know personally or have no connections with. If someone claims to be a “good friend of a friend,” call the mentioned person to confirm the story; and never ever act upon urgent requests for money or other forms of support, especially if they come from people you've never met.
Technical support scams
Scammers exploit our vulnerabilities and needs, including the need for safety. In tech support scams, cybercrooks may inform you about some serious issues with your profile (your LinkedIn account may even be hacked!) and urge you to act fast, click malicious links, or contact a non-existent call center.
If you wish to stay on the safe side, remember that LinkedIn uses various domains that may look suspicious e.g. [email protected] or [email protected]. However, the platform does not offer a phone number for customer service and will never ask for your password or computer access.
Lead generation
LinkedIn is a natural habitat for both: recruiters and B2B marketers. It's also a place where lead generation scams flourish, aimed at either gathering sensitive information to further exploit or sell marketers low-quality, often fake leads.
Filling out seemingly harmless forms or surveys may give scammers material for social engineering or phishing. Lead generation scams usually leverage fake LinkedIn profiles and contain “too good to be true” offers.
To save yourself from LinkedIn fraud, treat messages you get with a healthy dose of skepticism and distrust. Scan the sender's profile: If it looks like it's just been created, has few connections, and gives an altogether sloppy impression, there's a chance it's not real.
The rising number of LinkedIn scams is not a reason to abandon the dreams of a new job or a successful lead campaign. However, it should be a wake-up call, forcing us to learn and apply effective strategies to prevent LinkedIn fraud.
Who says business security has to be hard?
Protect your company from cyber threats without sacrificing convenience
Types of LinkedIn scams for businesses
While individual professionals are often the primary targets, businesses can also face grim consequences from LinkedIn scams. In fact, companies often face higher stakes, as cybercriminals deploy sophisticated tactics to trick employees and compromise organizational data.
Here are a few specific threats that businesses and freelancers should watch out for:
Non-existent products or services. Scammers often pose as legitimate B2B vendors to exploit company procurement processes. They might offer essential software, consulting, or advertising packages at an unbeatable price. Once the invoice is paid, the "vendor" vanishes, leaving the company with a hole in the budget and no product to show for it.
Overpayment scams. This tactic frequently targets freelancers, consultants, and small agencies found on the platform. A "client" sends a check or transfer for significantly more than the agreed amount and asks you to wire back the difference or pay a third party. By the time the bank realizes the original payment was fraudulent, the scammers have already pocketed your legitimate money.
Account takeover scams. One of the most dangerous threats involves criminals hijacking the profile of a high-level executive or a trusted partner. Using social engineering tactics to manipulate trust, they message employees from this compromised account, requesting urgent wire transfers or sensitive data. Because the request appears to come from a boss or colleague, employees are less likely to question it.
Common signs of LinkedIn scams
Beautiful people with no connections
Stunning picture and zero (or almost zero) connections: These two factors usually indicate that the profile is fake. Posing as somebody else is against the platform regulations and usually means something's off.
Too good to be true offers. Great job with a breathtaking salary, the prospect of quick but significant profit, and leads that come in at an uncommonly low price. Remember, if an offer feels too good to be true, it usually is. And it will get you in trouble.
Poorly written messages. Though LinkedIn fraud tends to be more polished, sloppiness is still something that gives many cybercrooks away. Scam messages often contain poor spelling and grammar - mistakes that no professional would allow themself.
Mismatched information. LinkedIn job scams are usually disguised as offers from legitimate companies. Always cross-check the information provided in the job description or business proposition with the official company websites or other reliable sources.
Personal requests. Asking for your sensitive information like bank details or passwords is a sign of a LinkedIn job scam rather than a legitimate career prospect.
Pressure tactics. Scammers want you to act first and think second. Do otherwise: Double-check the person contacting you and the website of the company they claim to represent.
How to spot fake LinkedIn profiles
In the LinkedIn landscape, there are profiles out there that scream: “fake!”. However, LinkedIn scammers do their homework, making our job of revealing their true intentions much harder. Harder, but not impossible.
Check the main characteristics of a fake LinkedIn profile:
No professional relations to you or somebody you know: Be cautious of strangers approaching you without clear intent. Especially if they quickly connect with many people or have no followers and a few connections.
Fake or lacking photo: Scammers often use photos of attractive people to lure you into accepting their invites. Pictures can be AI-generated or simply stolen, often showing real social media influencers or actors. When in doubt, upload the photo to Google or Bing image search and see what comes up.
Sloppy profile: If you ever looked for a job on LinkedIn, you know that a profile with poor spelling and professional description won't get you hired. Yet, cybercrooks can be lazy – many fake LinkedIn profiles are sloppy. Fake LinkedIn accounts may also contain discrepancies in work history, like achievements too great for a person of such a young age.
Protect yourself from LinkedIn scams
Knowing what could go wrong helps, but acting early is what actually protects your business and personal data. Beyond recognizing the signs of a scam, you need to actively manage your digital footprint.
One of the most effective ways to deter scammers is to limit the information they can gather about you. Your LinkedIn account often holds the keys to effective social engineering—connections, contact info, and work history. Take a moment to review your privacy settings and consider restricting who can see your connections list and email address to only your direct connections.
If you do encounter a fraudulent profile or a suspicious message, silence is not the answer. Always report the activity directly to LinkedIn to help keep the platform safe for other professionals. However, if the interaction went further—specifically if you shared financial details or made a payment—reporting to LinkedIn isn't enough. Contact your bank or credit card company immediately to freeze accounts and dispute transactions. To avoid this, you should also stick to the basic security practices when applying for jobs or engaging in conversations. In cases of identity theft or significant financial loss, you should also report the incident to relevant local authorities.
Safeguarding personal data on LinkedIn
To take your LinkedIn security even further, we recommend creating a unique password that’s kept in an encrypted vault like the NordPass one. This advanced password manager is easy to set up and use. It comes with handy features, allowing you to set up a Password Policy for administrative-level employees or have full transparency over logins to company accounts with the Activity Log feature.
But to understand what a game changer NordPass can be in your company, don't just take our word for it—give it a go yourself with the free trial.