Have you recently received a text message that says it’s from a recruiter or popular job website like Indeed or Zip Recruiter? These text messages normally include a link that you click on to access a job application or job listing. Always pause and proceed with caution before clicking on any job application link received via an unsolicited recruiting request. In fact, we discourage you from clicking on these links at all. 

Hackers use a common cyberattack called smishing to lure people into sharing their personal information.  These hackers send text messages to potential victims that include links redirecting unsuspecting people to malicious websites setup by the hackers. The hackers create these counterfeit websites so that they look like legitimate recruiting websites, and they include very official looking online application forms. The sole purpose of this attack is to fool people into disclosing their personal data. 

Every day, innocent people who are desperately seeking employment go to these malicious websites and submit sensitive information thinking that they’re applying for a job. Once submitted, the malicious website transmits your personal data directly to the hackers. These horrible people who are essentially thieves, take advantage of innocent people to enrich themselves. After the hackers have your personal data, they often sell it on the dark web. Some hackers earn a small fortune committing this heinous cybercrime.

After your information is sold to malicious websites on the dark web, other hackers can purchase your personal information. These other hackers then launch additional cyberattacks and fraud schemes against you or even hack into your bank accounts. Hackers can also steal your identity using your stolen data. 

What Should You Do If You Receive a Job Text?

• Never click on links embedded in unsolicited recruiting text messages
• Do not reply or initiate a conversation with the fraudster via text message
• Report smishing text messages to your mobile service provider by forwarding them to 7726 (SPAM)
• Block the phone number from contacting you in the future
• Delete the text messages

If a text message mentions a specific job posting on a real recruiting website, go directly to that website and search for the posting.

Smishing text messages are increasingly being used by hackers to commit cybercrime. Stay alert and be vigilant!