Recruiter impersonationmedium severity

LinkedIn Impersonation Recruiter

A profile claims recruiter authority while the message avoids verifiable details and pushes the target toward unsafe next steps.

How the pattern works

The attacker borrows the trust people give to hiring conversations. The profile may look polished enough at a glance, but the message avoids details that are easy to verify.

The conversation then moves toward a private channel, a strange form, a download, or a request for sensitive information.

Why it is effective

Recruiter messages arrive when people are hopeful, busy, or actively looking for work. That makes vague opportunity language feel worth pursuing.

The scam does not always start with an obvious malicious link. Sometimes the first goal is simply to get a reply and move the target into a more controlled channel.

What to check

Look for a real profile, a real company connection, an official job post, and a normal hiring process. Ask for a company email or careers-page link if anything feels vague.

If the recruiter avoids verification or asks for money, codes, documents, downloads, or private details early, stop.