Employer impersonation scams occur when fraudsters pose as managers, human resources representatives, co-workers, or recruiters, attempting to trick employees into providing sensitive information, sending money, or granting access to systems. These threats are increasing across industries and growing more sophisticated
Why these scams are dangerous:
- Financial risks: Scammers often use authority‑based pressure to request urgent payments, gift cards, or banking changes. These tactics have led to significant organizational losses, including billions linked to business email compromise. For example, the scammer may pretend to be the CEO of the organization requesting that an employee send money to an external bank account.
- Identity and credential theft: Impersonators frequently attempt to collect login credentials or personal data by mimicking human resources, IT, or onboarding processes. Once inside, they can hijack accounts, intercept payroll, or gain access to internal systems, including employees’ personal information in that system.
- Reputational damage: Scams targeting job seekers, such as fake recruiter outreach, could potentially harm a legitimate employer’s reputation. It also could discourage real candidates from engaging with the company on genuine opportunities.
- Legal and compliance exposure: If scammers misuse your company’s identity, it could trigger regulatory consequences and liability.
- Operational and emotional impact: These scams disrupt workflows, burden human resources and IT teams, and cause stress or embarrassment for employees caught in deceptive schemes.
How to prevent these scams:
- Beware of urgency: Messages insisting that you act immediately, especially ones involving money or confidential information, are a major red flag.
- Verify email details: Look for misspellings, unfamiliar domains, or personal email accounts. Even minor differences matter.
- Confirm suspicious requests: If a message seems off, contact the sender using your known company contact methods, not the number provided in the suspicious message.
- Watch for unusual instructions: Real employers won’t ask you to buy gift cards, send codes, provide credentials over text, or update payroll information outside formal channels.
- Scrutinize human resource‑ and ITS-themed messages: Scammers know HR and ITS departments carry authority. Be cautious when notices that ask you to do something come from either of these departments.
- Check links and login pages: On mobile devices especially, fake login portals look real because URLs are harder to see. If the page feels unfamiliar, stop and verify.
- Validate recruiter communications: Recruiter impersonation is on the rise, especially for new hires. If asked to provide sensitive information before official onboarding, confirm the legitimacy of the request through verified channels.
If you suspect a scam or an unfair business practice, contact the Attorney General's Office at www.OhioProtects.org or 800-282-0515.