A fraudulent listing rarely looks fraudulent. It looks like an opportunity, which is exactly why it spreads.
The checks below take about five minutes and do not require any special knowledge. They will not catch every bad actor, but they will filter out the lazy majority.
1. Check the domain, not the design
Open the organisation’s website by typing its name into a search engine, not by following the link you were sent. Then find the careers or students page from there.
Look at the registered domain in the address bar:
company.comis the organisation.company-careers.comis not necessarily the organisation.company.vercel.apporcompany.applynow.xyzis a third-party host. It may be legitimate, but it needs confirmation.company.in.netor a misspelled domain is a warning sign.
If the listing appears only on social media and nowhere on the organisation’s own site, treat it as unverified until someone official confirms it.
2. Follow the apply link to its destination
Hover before you click. The destination should be an applicant tracking system or a page on the organisation’s domain. Redirect chains through shorteners, or a form on a free form builder, deserve a second look.
3. Notice what they ask for, and when
| Stage | Reasonable to request | Treat with caution |
|---|---|---|
| Application | Name, email, phone, resume, portfolio | Aadhaar, PAN, bank details, photo of ID |
| Interview | Work portfolio, references, availability | Payment, purchase of equipment from a specific seller |
| Offer | Address, emergency contact, tax forms, bank details for payroll | Requests over WhatsApp from a personal number before any interview |
Some legitimate onboarding processes do require identity documents. The distinction is stage and channel. Identity documents belong after a written offer through an official system, not in the first message.
4. Read the offer letter like a contract
A real offer names the organisation, the role, the reporting manager or team, the start date, the duration, the compensation and the notice terms. If any of those are missing, ask.
Specific things to check:
- Is the legal entity name the same as the organisation you applied to?
- Is the compensation stated, with deductions and payment dates?
- Is there a bond, a training fee or a clawback? These are not automatically illegitimate, but they must be in writing before you accept.
- Does the email domain match the organisation’s domain?
- Is there a named person you can contact through an official channel?
If the letter arrives as an image, or asks you to install a messaging app to “complete onboarding”, slow down.
5. Confirm through a second channel
Find the organisation’s official contact page and send one short email: “I received an offer for [role] dated [date] from [sender]. Could you confirm it was issued by your team?”
Legitimate organisations answer this. Fraudulent ones pressure you to hurry and stop asking questions.
6. Know what to do if something is wrong
If you have already shared information or money:
- Stop communicating through the suspect channel. Keep screenshots and transaction records.
- Inform your bank immediately if financial details were shared.
- Report the incident on the national cybercrime portal.
- Tell your college placement cell so other students are warned.
Do not feel embarrassed. These operations are designed to work quickly, and reporting early limits the damage.
The five-minute checklist
- [ ] The domain matches the organisation.
- [ ] The listing exists on the organisation’s own site.
- [ ] The apply link leads to an official system.
- [ ] No fee, deposit or purchase is requested.
- [ ] No identity or bank documents are requested before a written offer.
- [ ] The offer letter names the role, duration, compensation and contact.
- [ ] A second, official channel confirms the offer.
The short version
Verify the domain, the destination and the request. If any of the three feels off, slow down and confirm through an official channel before you share anything you cannot take back.