Recruiter Impersonation Protection: When Your Company Name Is the Bait

# Recruiter Impersonation Protection: When Your Company Name Is the Bait

Recruiter impersonation protection starts with a hard fact: your company name is being used in outreach you did not approve. It appears in LinkedIn messages, WhatsApp threads, and fake job offers, attached to a recruiter who does not exist. The logo is yours. The posting looks like yours. The person is not.

In a report we handled, a candidate received a message from someone using the name and photo of a real recruiter at a mid-sized software company. The message offered an interview and asked for a document verification fee. The company had no record of the sender. The recruiter's identity was borrowed.

This is recruiter impersonation. The borrowed name is the hook. If the conversation goes wrong, your company absorbs the distrust.

Why a fake recruiter uses your company name

Trust is the asset being exploited. An employer brand is built to make a stranger feel safe. An impersonator uses that safety to move fast: request a fee, collect a passport scan, send a phishing link, or push a fake onboarding portal.

In our queue, candidates often flag the suspicious profile before the company knows. The report reaches your talent team later, through a forum post or a forwarded screenshot.

What recruiter impersonation protection looks like

A public LinkedIn profile exposes a name, a photo, and a headline. Those are easy to copy. You can make the distinction visible another way. A published, verified roster of your actual recruiters gives candidates a place to check before they respond.

When a candidate sees a message from 'Priya, Talent Acquisition at Your Company,' they can search the roster. If Priya is there and the contact details match, the message is likely real. If Priya is not there, the profile is not authorized. The check is quick enough to do before replying.

This is not a background check service. It is a roster you control. Each recruiter entry is tied to the company, not to a self-reported LinkedIn account. Candidates see a clear VERIFIED mark for people on your roster and a NOT ISSUED result when the name or profile has no match.

What we see in reported impersonation cases

In the reports we handle, the pattern repeats. An impersonator copies a real employee's name, photo, and headline. In those reports, the target is usually a candidate who applied to one of your roles or posted 'open to work.' In those reports, the first message is friendly. The second asks for something urgent.

In our reports, the ask is almost always money or identity documents before any interview. Sometimes the fee is called a training deposit, sometimes a background check fee, sometimes a laptop shipping fee. In those reports, the labels change. The mechanism does not. We have not seen a legitimate recruiter charge a candidate in our reports.

A simple claim process for companies

If your company name is being impersonated, the first step for your team is not a takedown. It is a source of truth. Claim your company profile, list the people who actually recruit for you, and publish the roster where candidates already look.

When a candidate asks 'is this recruiter real,' the answer should not depend on a LinkedIn connection count. It should be a page you control, with names you verified, marked in a way a rushed job seeker can understand.

The fake profiles keep copying. Your roster can be the thing they cannot copy.