‘I lost my savings after a job interview scam’

Job Interview Scams Are Emptying Wallets — and Jobseekers Are the Primary Targets

Constantvpn.com – A wave of sophisticated recruitment fraud is sweeping through online job platforms, leaving candidates financially devastated within hours of what they believed was a routine interview step. The latest confirmed case involves a jobseeker who lost £18,000 in cryptocurrency savings after downloading a seemingly ordinary document during a video interview arranged through LinkedIn. The attacker vanished almost immediately after draining the victim’s digital wallets.

The pattern is becoming increasingly common: a stranger messages a candidate on a professional networking site, poses as a recruiter, walks them through a convincing video call, and then directs them to complete a “technical assessment” hosted on a familiar-looking spreadsheet. That spreadsheet, however, carries embedded malware. By the time the candidate finishes the task and goes to sleep, their accounts have been stripped bare.

The Victim’s Account

The affected individual, who requested anonymity, had recently submitted a resignation notice and made their availability for new roles visible on their LinkedIn profile. A fabricated recruiter reached out with what appeared to be a legitimate offer, conducted a full video conversation about the role, and then instructed the candidate to complete a standard technical exercise via a Google Sheets document.

After finishing the exercise, the candidate shut down their computer. Upon waking, they discovered their online cryptocurrency wallets had been emptied.

“I wiped my computer and changed all my passwords and was exhausted emotionally and mentally drained. I felt a mixture of disbelief and anger — at the hackers and at myself. I was also confused until I figured out how they had got me.”

The emotional toll, the victim added, extended beyond the financial loss itself:

“It’s a horrible feeling to be out a substantial amount — something I wouldn’t wish on my worst enemy.”

Why Younger Candidates Are Especially Vulnerable

LinkedIn published internal data it labelled the Gen Z “Scam Gap,” revealing that younger professionals face the highest exposure to recruitment fraud at 32 percent of their interactions. Equally striking, nearly a third — again 32 percent — admitted to overlooking warning signs because the competitive labour market made them feel they could not afford to question an opportunity.

In a statement addressing the trend, the company acknowledged that in a saturated job market, many young workers feel pressured to accept every lead without scrutiny, perceiving openings as so scarce that scepticism feels like a luxury.

The platform pointed users toward its own guidance pages, which recommend verifying that a company and role genuinely exist, conducting independent research before entering any conversation, and treating unsolicited interview invitations with caution.

How the Attack Actually Worked

Cybersecurity researcher Charlie Kelly, associated with the domain-monitoring service Have I Been Squatted, examined the mechanics of the LinkedIn-based intrusion and described it as unusually difficult to detect in real time.

“This wasn’t a badly written email with a suspicious attachment — this person was walked through what looked like a real job interview, on real Google pages, behind a real Google login, and the software they were asked to install was digitally signed like any legitimate app.”

The sophistication of the setup means candidates cannot rely on the usual heuristics — checking sender addresses, looking for typos, or inspecting file extensions. The entire experience mimics a genuine hiring workflow, from the video call to the spreadsheet interaction, making it extraordinarily hard to interrupt mid-process.

Indeed and the Proliferation of Fake Interview Apps

The LinkedIn case is not isolated. Multiple candidates have reported near-identical attacks routed through the job-listing platform Indeed. In July, Indeed issued public guidance urging jobseekers to recognise common scam tactics.

Criminals exploit the adrenaline and urgency of an interview process to pressure candidates into installing mobile applications that look official but are booby-trapped. Two names have surfaced repeatedly: a fake “Indeed Interview” app and another branded “MyInterview.”

Cybersecurity firm Malwarebytes catalogued the social-engineering lures used to trigger downloads, including prompts such as “Complete your interview by installing the Indeed app” or “salary agreement available after app installation.” Once installed, these applications grant attackers access to private data, which can then be leveraged for extortion or woven into broader financial attacks.

“Interviewing through Indeed’s platform happens entirely in a browser and never requires downloading a special app. Any message asking a job seeker to download an app to participate in an interview is not legitimate.”

What Jobseekers Should Do Differently

The convergence of these incidents points to a handful of practical safeguards. Candidates should independently verify any company’s existence through its official website, registered filings, or third-party business directories before accepting an interview invitation. They should confirm that interview communications originate from verified corporate email domains rather than personal or lookalike addresses. Any request to install software, download an app, or open an attachment outside a known, secure platform warrants a pause and independent verification.

The financial stakes are no longer trivial. In the single documented case above, £18,000 disappeared within one night. Across the broader landscape of reported incidents, losses are accumulating rapidly, and the pressure of a tight labour market continues to make candidates less likely to question an offer that arrives at precisely the moment they need one.

For anyone currently active on job platforms, the safest assumption is that every unsolicited interview invitation deserves the same scrutiny you would give an unknown email asking for bank details — except here, the cost of being wrong is measured in thousands of pounds and weeks of emotional recovery.