The Message That Arrives Three Days After You Update Your Resume
You uploaded your resume to a job site on Monday. By Thursday you have a WhatsApp message from "HR Priya" about an opening at a company you half-recognise. The package is ₹6.5 LPA. The interview is a five-minute call. The offer letter arrives the same evening.
Then comes the line the whole thing was built for: a refundable registration fee, or a security deposit for the laptop, or a charge for the "background verification portal". Usually ₹1,500 to ₹15,000. Always urgent. Always today.
If you are a final-year student from a tier-2 or tier-3 college, you are the exact person this is aimed at. Not because you are gullible — because you are applying widely, your number sits on a dozen job portals, and you very much want this to be real. Scammers are not testing your intelligence. They are testing your hope.
The One Rule That Catches Most of Them
A genuine employer never asks a candidate for money. Not for registration. Not for training. Not for a laptop deposit, an ID card, a placement kit, a background check, an "onboarding portal", or tax on your joining bonus.
Money flows from the employer to you. That is what a job is. The moment the direction reverses, you are not in a hiring process any more. This single rule catches most fresher job scams. Everything below is about the cases where the ask is disguised, delayed, or dressed up as something respectable.
Scam 1: The Registration or Security Deposit
The oldest one, and still the most common. A small amount, described as refundable, described as standard, described as something everyone pays.
How it is dressed up: a refundable deposit for the company laptop, returned with your first salary. A one-time ₹1,999 registration on the HR portal, adjusted against your joining bonus. A document verification charge paid to a third-party agency.
The amount is deliberately small enough that arguing feels petty. Then, once you pay, a second fee appears — a courier charge for the ID card, a processing charge to release the refund. That is the tell. Real processes do not grow new fees.
How to verify: ask for the demand on company letterhead, with a GST invoice, payable into the company's registered bank account — not a UPI ID. They will not produce it.
Scam 2: The Fake Offer Letter
A PDF arrives with a logo, a CTC breakup and a joining date. It looks convincing, because copying a layout is easy and the logo is sitting on the company's own website.
Check these, in order:
- The sender's email domain. A real offer from Infosys comes from an
@infosys.comaddress. Not@infosys-careers.in, not@infosysrecruitment.org, and certainly not Gmail. Lookalike domains are the most common giveaway — read it character by character. - The signatory. Search that name on LinkedIn. Does the profile show years of history at that company, with colleagues and activity? A profile created four months ago with 40 connections is not an HR head.
- The process behind it. No assessment, no technical round, no HR round, instant offer — then there is no job.
- The bank details. Any offer letter containing an account number you are meant to pay into is fraudulent. Full stop.
Then do the thing almost nobody does: go to the company's official careers page, find the official careers email, and ask whether that offer exists. Companies get asked this constantly and they answer. It costs you one email.
Scam 3: The Training Bond and "Pay After Placement" Trap
This one is legal-shaped, which is what makes it hard. An institute offers training with guaranteed placement. You pay ₹40,000 to ₹1,50,000 upfront, or sign an agreement to pay out of your future salary. The pitch never varies: partner companies, 100% placement record, limited seats.
Some of these are genuine training businesses with ordinary outcomes. Some are pure extraction. The difference shows up in the contract, not the sales call. Before signing, check three things:
- What counts as a "placement". If any job, at any salary, in any city discharges their obligation, the guarantee is worthless — they can place you at ₹1.8 LPA in a role you would have found anyway.
- The exact refund condition. Usually you must have attended every session, cleared every assessment and accepted every interview offered. Miss one, forfeit everything.
- Who the "partner companies" are. Ask for names, then find three alumni on LinkedIn who list that institute and now work at those companies. If you cannot find any, the partnerships are aspirational.
And a harder rule: no genuine employer charges you for training you must complete before joining. A company investing in you pays a stipend. If the training costs money and the job appears only afterwards, the training is the product and the job is the advertisement.
Scam 4: WhatsApp and Telegram "Recruiters"
Real recruitment does move to WhatsApp — usually after an email or a LinkedIn message. What is not real is a hiring process that begins on WhatsApp from an unknown number, or lives entirely inside a Telegram group.
Red flags here: a stock photo or company logo as the display picture, never the person. A virtual number, or a country code you do not recognise. A flat refusal of any video or voice call. A company name that shifts slightly between messages. And a Telegram group with hundreds of members posting "received my salary today, thank you sir" — those messages are the group's entire purpose, posted by the operation's own accounts to make paying feel normal.
Scam 5: The Work-From-Home Data Entry Trap
This targets students hardest, because it promises income now, no experience, flexible hours.
The typing-job version. You pay a registration fee for "typing work" at a per-page rate. When you submit, it is rejected for accuracy below an agreed threshold — a threshold set so that everything fails. You have paid, you have worked, you get nothing, and the terms you accepted say quality was the condition.
The task version, which is worse. You are paid small amounts for trivial tasks: rating videos, liking posts. The early payouts are real. Then you are invited to a "prepaid task" tier where you deposit money to unlock higher earnings. The first deposits pay out. Then your account is stuck at a level that needs one more, larger deposit to release everything. There is no release. People have lost lakhs this way, in escalating steps, after small early wins convinced them it was genuine.
The tell for both: you are being asked to fund the work you are doing. No real employer needs your capital in order to pay you a salary.
Scam 6: The AI-Built Company That Does Not Exist
This is the newer one, and it is good.
A complete company website — About page, staff photos, client logos, a blog, a careers page, an application form. All generated in an afternoon. The staff photos are synthetic. The logos are lifted. The office address is a real building, just not theirs.
You can no longer judge a company by how professional its website looks. Judge it by whether it exists in records it cannot fabricate.
| Check | Where | What a real company looks like |
|---|---|---|
| Company registration | MCA portal, "View Company/LLP Master Data" at mca.gov.in | A valid CIN, a date of incorporation, a registered address, named directors |
| GST registration | gst.gov.in, "Search Taxpayer by GSTIN" | Active status, legal name matching the company |
| Employee footprint | LinkedIn company page | Dozens of employees with multi-year histories, not five profiles created this quarter |
| Domain age | Any public WHOIS lookup | A domain registered years ago, not six weeks ago |
| Independent presence | Plain Google search, AmbitionBox, Glassdoor | Reviews, news, job posts from before this month |
A company incorporated three weeks ago, with no GST registration, no employees on LinkedIn and a freshly registered domain, offering ₹8 LPA to freshers, is not a startup. It is a set.
One honest caveat: a genuinely new startup will also look thin on several of these. Weigh them together — and keep the money rule above all of them.
The 60-Second Check, In Order
Run these the moment any opportunity reaches you. Stop at the first failure.
- Is money being asked of me, in any form, at any stage? Yes → stop. Five seconds.
- Is the email domain the company's real domain? Compare it letter by letter with the domain on their official site.
- Does the recruiter have a LinkedIn profile with real history? Years at the company, real colleagues, activity going back — not a shell created recently.
- Does the company exist in MCA or GST records under the name on the offer? Two searches, one minute.
- Was there an actual interview? No assessment, no technical round, instant offer — not a job.
- Does the urgency make sense? "Confirm in two hours or the seat goes" is a sales technique, not a hiring practice. Real offers survive a night's sleep.
Six checks, under a minute. They cost you nothing on real opportunities, because real recruiters expect candidates to verify things.
If You Have Already Paid
First: this is not your fault, and you are not the only one. These operations are professional and run at scale. Shame is what stops people reporting, and reporting is the only thing that helps.
Act fast. Reporting within the first few hours gives the best chance of the transfer being frozen before it is moved on. No route guarantees recovery, and you should not believe anyone who promises it.
- Call 1930, the national cyber-crime financial fraud helpline. Have the transaction ID, the amount, the time and the receiving UPI ID or account number ready.
- File a complaint at cybercrime.gov.in. The National Cyber Crime Reporting Portal accepts financial fraud complaints online and routes them to the relevant state cyber cell. Keep the acknowledgement number.
- Tell your bank or payment app immediately, in writing. Report the transaction as fraud, ask for a chargeback or fraud claim, and get a reference number. Banks have grievance processes with defined timelines, and there is an escalation route to the RBI Ombudsman if yours does not handle it properly.
- File an FIR at your local police station or cyber cell if the amount is significant. An online complaint and an FIR are not the same thing, and some routes need the FIR.
- Preserve everything. The full chat with the number and display name, the offer letter PDF, the email with its headers, the payment receipt, the website. Do not delete the WhatsApp thread, however much you want to.
- Report the accounts — the LinkedIn profile, the WhatsApp number, the Telegram channel. Slow, but it is how these get taken down for the next person.
Two things to be clear-eyed about. Recovery is possible but not common, and far likelier if you reported within hours. And there is a second-stage scam aimed at victims: people who offer to recover your money for a fee. That is the same crime wearing a different hat. Never pay anyone to recover money you lost to a scam.
What To Do This Week
- Check the sender domain on every "opportunity" sitting in your inbox and WhatsApp. Delete the ones that fail.
- Write the six checks on a sticky note and put it on your laptop. You will not remember them under excitement, which is exactly when you need them.
- Hide your phone number on job portals wherever the platform allows it. Most of this traffic starts with a scraped number.
- Tell your batchmates about the task-deposit version specifically. It takes the most money from students, and it spreads through friend groups because the early payouts look like proof.
The habit that protects you from scams is the same one that makes a real job search work: knowing exactly who you are talking to before you spend anything on them — money, or hours.
If you would rather spend those hours on companies you have already verified, JobApplyAI is a Chrome extension that drafts a personalised application for a job post you chose yourself. The checking stays yours. Only the typing goes away.