ResumeProofed

A 2026 job scam checklist for Australian job seekers

Employment scams now rank second only to investment fraud in Australia. A checklist for verifying a recruiter or offer is real before you hand anything over.

A recruiter's message bubble on a phone with a red flag pattern overlaid on suspicious lines, beside a Southern Cross constellation and a verified checkmark on a separate, legitimate message

A recruiter messages you out of nowhere on WhatsApp with a role that sounds close to perfect, and asks you to complete a quick "skills assessment" before the first call. It's a reasonable thing to want to say yes to fast, especially mid-search when a promising lead feels rare. It's also, right now, one of the more common shapes an employment scam in Australia actually takes, and the data on how often Australians are falling for exactly this pattern is worth taking seriously before you click anything.

Person carefully examining a text message on their phone
Photo by RDNE Stock project on Pexels

The position worth stating first: employment scams aren't a fringe risk in Australia in 2026, they're a mainstream one, and the specific tactic worth knowing is the fake "skills assessment," a step that looks like ordinary hiring process but exists purely to harvest your personal information or install something on your device. This isn't a reason to distrust every recruiter who reaches out. It's a reason to run a short, specific verification routine before you hand over anything more than a resume.

How common employment scams actually are right now

TrendLife's Digital Life and AI research, reported by HR Leader in July 2026, found that employment-related scams now rank second only to major purchase or investment scams as a common trigger for fraud in Australia. That ranking alone should recalibrate how much scrutiny a job offer deserves relative to how much most people give it.

The same research points to a real gap in how prepared job seekers are to catch these attempts. Twenty one percent of Australians say they aren't confident they could identify AI-generated scam content or a deepfake if they encountered one. Separately, 32 percent are either unaware of the risk of feeding personal information into AI tools, or unsure about the specifics of that risk. Combined, these two figures describe a meaningful share of job seekers who would struggle to catch a scam built around exactly the tools that are cheapest and easiest for a scammer to use in 2026: AI-generated recruiter personas, AI-written job descriptions, and AI-assisted "skills assessments" that exist purely to extract data.

The specific tactic worth knowing: the fake skills assessment

The tactic TrendLife's research, as covered by HR Leader, identifies as active right now is straightforward and, on the surface, unremarkable: a scammer posing as a recruiter invites you to complete an online "skills assessment" or "work sample" test as an early step in the hiring process. It looks like a normal, even diligent, part of hiring. The actual purpose is to collect personal information under the cover of a legitimate-seeming task, and in some versions, to get you to download or run something that compromises your device.

What makes this tactic effective is that a real skills assessment is a completely normal part of legitimate hiring for plenty of roles, technical tests, writing samples, case study exercises. The scam version doesn't stand out by looking unusual. It stands out, if at all, by the surrounding context: how you were contacted, how fast the process is moving, and what the "assessment" actually asks you to provide or install.

What Australia's official guidance says to check

Person researching recruiter and company information on their laptop
Photo by Alena Darmel on Pexels

The ACCC's Scamwatch page, the Australian government's own consumer protection resource, lists the specific patterns worth checking any recruiter contact against:

  • Unsolicited contact through encrypted or informal messaging. A recruiter reaching out cold via text message, WhatsApp, Signal or Telegram, rather than a verifiable platform like LinkedIn or a company email address, is a real warning sign, not a neutral detail.
  • A promise of easy, high income for minimal experience or effort, especially for remote work with vague duties.
  • A rushed hiring process with no real interview. Scamwatch specifically flags a hiring process that moves quickly with no interview or discussion about your actual qualifications, experience or references as a core red flag, since a genuine employer almost always wants to talk to you first.
  • Any request for upfront payment, whether framed as a training fee, equipment cost, background check fee, or "recruitment fee," paid via bank transfer, PayID or cryptocurrency.
  • Being asked to move money or receive and forward packages on behalf of the "employer," a pattern that can make you an unwitting participant in money laundering, not just a scam victim.

Scamwatch's own advice is to verify a recruiter independently, using contact details you find yourself rather than the ones supplied in the unsolicited message, to avoid trusting a listing purely because it appeared on a reputable job board, and to search the company name alongside the word "scam" before proceeding. None of this requires special tools or expertise, just a deliberate pause before the process moves further.

A verification checklist to run before you proceed

  1. Check how you were contacted. A cold approach via WhatsApp, Signal or Telegram, especially for a role you never applied to, deserves more scrutiny than an email from a verifiable company domain or a message through a platform like LinkedIn.
  2. Verify the recruiter and company independently. Search the company's name plus "scam" or "reviews," and look up the recruiter on LinkedIn to confirm they're a real employee with a history at the company, rather than a profile created recently with little activity.
  3. Ask why there's no interview. If the process moves straight from first contact to a "skills assessment" or a job offer with no conversation about your background at all, that's the specific pattern Scamwatch calls out directly.
  4. Read what the "skills assessment" actually asks for. A legitimate test asks you to solve a problem, write something, or demonstrate a skill. It should never ask for banking details, a copy of your identity documents beyond what a real employer would need post-offer, or require you to download and run an unfamiliar application.
  5. Never pay to get or keep a job. Any fee framed as training, equipment, background checks or onboarding costs, requested before you've been formally employed, is a hard stop, not a negotiation point.
  6. Slow the process down on purpose. Scammers rely on urgency. A legitimate employer will not penalise you for taking a day to verify details independently before proceeding to the next step.

A worked example

The message: A WhatsApp text from an unsaved number: "Hi, I'm a recruiter for [well known retailer]. We found your profile and have a remote data entry role paying $45/hour. Please complete this quick skills assessment link to move forward: [link]."

Run it against the checklist. Unsolicited contact via WhatsApp: flag. No interview or discussion of background before the "assessment": flag. Pay rate that's notably high for the stated role: flag. At this point, rather than clicking the link, search the retailer's actual careers page for the role directly, and search the retailer's name alongside "WhatsApp recruitment scam" before proceeding any further. If the role doesn't appear on the company's own site and a quick search turns up other reports of the same pattern, treat the message as a scam and stop engaging, rather than completing the assessment to "see what it actually involves."

This same discipline, verify independently before you invest effort, is the same instinct worth applying to checking whether a job posting is genuinely active before you spend real tailoring time on it, even when the listing turns out to be a real company simply slow to hire rather than a scam.

Why AI makes this harder to catch by instinct alone

Person securely entering credentials or password on a computer
Photo by Adventure Studio on Pexels

Part of why the confidence gap in the data above matters is that the tools available to scammers have shifted. A recruiter profile with a professional headshot, a plausible work history and a confident writing voice used to take real effort to fake convincingly. AI tools have made all three of those cheap to generate at scale, which is part of why TrendLife's research, as reported by HR Leader, frames deepfake and AI-generated content recognition as a genuinely relevant skill for job seekers now, not a hypothetical future concern.

This doesn't mean every polished recruiter profile or well-written job ad is suspect. Most aren't. It does mean that "the profile looks professional" and "the writing sounds confident" have stopped being reliable signals of legitimacy on their own, because they're now trivially easy for a scammer to produce. The verification habits in the checklist above, checking independently rather than trusting presentation, matter more for exactly this reason: they don't rely on your ability to spot a fake by instinct, which is precisely the skill the data above shows a meaningful share of job seekers currently lack confidence in.

The same caution applies to any "skills assessment" tool itself. If a legitimate-sounding assessment platform asks you to install desktop software rather than complete a task in a browser, or asks for permissions unrelated to the stated task, camera access for a written test, file system access for a multiple choice quiz, treat that mismatch as a signal on its own, independent of how professional the surrounding messaging looks.

If you think you've already given information to a scammer

Contact your bank immediately if you've shared banking details or made a payment, since acting fast materially improves the chance of stopping or reversing a transaction. Report the scam to Scamwatch so the pattern gets logged against other reports. If you've shared identity documents, consider a credit check or a fraud alert through your bank or a credit reporting body. None of this undoes what happened, but acting quickly limits how far it goes.

Common questions

What is the most common job scam tactic in Australia right now?

A fake "skills assessment" or "work sample" test, presented as an early hiring step, used to collect personal information or get a candidate to download something harmful, is identified as an active, current tactic by TrendLife's July 2026 Digital Life and AI research, reported by HR Leader.

How do I know if a recruiter contacting me is real?

Verify independently rather than trusting the message itself: search the recruiter and company by name, check the recruiter's history on a platform like LinkedIn, and look for the role listed directly on the company's own careers page. Scamwatch specifically recommends using contact details you find yourself, not the ones supplied in the unsolicited message.

Is it normal for a job process to skip the interview?

No. Scamwatch identifies a rushed process with no interview or discussion of your qualifications and experience as one of the clearest warning signs of an employment scam. A legitimate employer almost always wants to speak with you before extending an offer or asking you to complete assessments.

Should I ever pay money to get a job?

No legitimate employer requires payment from a candidate to be hired, whether framed as a training fee, equipment cost, or recruitment fee. Any request for upfront payment via bank transfer, PayID or cryptocurrency is a hard stop.

How common are employment scams in Australia?

Employment scams rank second only to major purchase or investment scams as a common trigger for fraud in Australia, according to TrendLife's July 2026 research, reported by HR Leader.

What should I do if I think I've been scammed by a fake recruiter?

Contact your bank immediately if you've shared banking details or made a payment, report the scam to Scamwatch, and consider a fraud alert if you've shared identity documents. Acting quickly improves the chance of limiting the damage.

Where ResumeProofed fits, and where it doesn't

ResumeProofed can't verify whether a specific recruiter contacting you is real, and no resume tool can. What it can do is remove one small pressure that makes scam "assessments" more tempting to rush through: because tailoring a resume to a specific, legitimate job ad takes minutes rather than hours, you don't need to feel like a single promising-looking lead is too valuable to slow down and verify properly.

Try ResumeProofed free: two tailored applications on the house, no card required.

Written by Eli Carter · Published 31 August 2026

Keep reading