When Fake Recruiters Use Your Brand on LinkedIn.

Somewhere on LinkedIn there may be a recruiter using your company name, your logo and a job title you have never advertised.

They message candidates, run an interview over a messaging app, then ask for a payment, bank details or a scan of a passport.

The people who fall for it will not contact you. They will quietly decide your company is the sort of company that does this, and tell a few friends.

Job scams get written up as a job seeker problem. The name in the scam is yours, so the response has to be yours, and it is an operations question: who owns it, how it gets spotted, how a report actually gets filed, and what you say to someone who has already been taken in.

Why a fake recruiter using your name is your problem

The loss here is trust, and it lands on the brand whose name was borrowed.

In LinkedIn’s own research across five markets including the UK, 36% of recruiters said they had been victims of impersonation, and 67% said job scams are making it harder to build trust with candidates.

That second figure is the commercial one. Every genuine approach your talent team makes now arrives in an inbox that has been trained to be suspicious of approaches exactly like it.

Why nobody in your company owns it

Impersonation sits across three teams and belongs to none of them.

Social holds the LinkedIn Page and the admin rights. Talent owns hiring and knows which roles are real. Legal owns the trademark.

So the first report lands in a shared inbox, gets forwarded twice, and stalls while each team assumes another one has it.

This is a social operations problem before it is a legal one. Name one owner, usually whoever runs the Page, because they hold the access and the response channel. Legal advises, talent supplies the facts, the owner files and speaks.

What impersonation under your name looks like

LinkedIn’s own guidance on scams describes the pattern well. Circulate it internally so people recognise what they are looking at.

• A posting that mirrors a real company but has no link to the business, mismatched email or website domains, or no findable address, phone number or email
• A recruiter writing from a free personal email account rather than a company domain
• A profile with few connections, and almost none inside the company it claims to represent
• A fast push to move the conversation into private messaging. LinkedIn says 90% of reported scam messages involve exactly that move
• Any request for payment, bank details or identity documents as part of applying

Detection: check for yourself, on a schedule

Waiting to be told is the failure mode. By the time one candidate is annoyed enough to message your Page, several others have already gone quiet.

Give the owner a recurring check, fortnightly or monthly, and somewhere to record that it happened.

• Your company name in people search, scanning for profiles claiming roles that do not exist
• Your company name in job search, including misspellings and spacing variants
• Your own Page’s Jobs tab, read against your actual list of open roles
• Your brand name alongside words like hiring, recruiter and careers
• The careers inbox and social DMs for “is this really you?” messages, which is the free signal most teams delete

The report route most brands do not know they have

LinkedIn has a form for reporting inaccurate employment information on another member’s profile. If someone has listed your company on their profile and does not work there, that is the route.

Two details make it an operations question rather than a support question.

First, only a Page super admin can use it. LinkedIn states that submissions from Page content admins, paid media admins or analysts will not be processed.

Second, LinkedIn says the reported information will be removed within fourteen days unless the member challenges it. That is a stated window, which is more than most reporting routes give you.

The form wants a link to the account, the specific experience you believe is inaccurate, an explanation of how you know it is inaccurate, and your digital signature.

So find out who your super admins are before you need them. If the only one left the business eighteen months ago, you cannot file at all.

The other routes, and what to capture before you file

Each of these takes about five minutes once somebody owns it. They only feel hard because they sit in nobody’s workflow.

• A fake job post: open the job, use the More icon, choose Report this job, then select the scam, phishing or malware reason
• A fake profile: on the profile, More, then Report or Block, then report the member or the entire account, then choose that the person is impersonating someone or that the account is not a real person
• A Page pretending to be yours: on that Page, More, then Report abuse
• Trademark misuse: LinkedIn has a Notice of Trademark Infringement form, submitted under penalty of perjury, which is a decision for your legal advisers rather than your social lead

Capture the evidence first, because a successful takedown deletes the proof.

• Screenshots showing the full URL and the date
• The profile and job post URLs saved as text
• The message thread, and any email domain used
• What the person was asked for, and when

What a report realistically achieves

Set expectations honestly with whoever is chasing it.

In LinkedIn’s community report covering the second half of 2025, automated defences blocked 97.8% of the fake accounts the platform stopped, and 99.7% of fake accounts were stopped before any member reported them.

Read that from your side. Almost all of this is caught by machines before anyone sees it, so the account that reached your candidate is one that got past that filter. Those are the harder cases, and your report is one signal among many.

Report it, then behave as though nothing will happen this week. Warn people in parallel, and never sequence the warning behind the takedown.

Make the real thing easy to verify

A candidate has about thirty seconds of patience for checking whether a job is real. Make thirty seconds enough.

• One careers page that is the single source of truth. If a role is not listed there, it is not yours
• A published contact policy on that page: which domains you email from, which platforms you interview on, and that you will never ask for payment, bank details or identity documents before an offer
• Employees who recruit having profiles that list your company and connect to the Page, so a name can be checked in seconds

Verification badges help, with limits worth knowing. Page verification is granted by LinkedIn against its own criteria, so not every Page can get one.

Workplace verification with a work email is only available to members at select companies while LinkedIn expands support. Verification badges on job posts are being piloted with a select number of LinkedIn Jobs customers, so plenty of real jobs will not carry one.

The absence of a badge proves nothing, which is why the careers page carries more weight than the badge. Verification is still worth having for other reasons, including what it does to engagement.

The holding line, written before you need it

Write it now and get it approved now, so nobody is drafting under pressure with a distressed person waiting.

It needs five things: an acknowledgement, how you actually contact candidates, what you will never ask for, where the real roles live, and what to do if they have already paid or shared documents.

On that last point, the practical steps are their bank first, then the police. In England, Wales and Northern Ireland, fraud and cyber crime go to Report Fraud, the national reporting centre that replaced Action Fraud in December 2025, online or on 0300 123 2040. In Scotland, fraud goes to Police Scotland on 101.

If your existing template still says Action Fraud, it is sending people to a name that no longer runs the service.

Plain beats polished. A short, specific post from the Page and a copy and paste reply for DMs will do more than a careful legal statement three days later.

Then name who is allowed to send it without waiting for approval. Speed is the entire reason for writing it early.

What to log, so the pattern is visible

Keep one row per incident: date found, how you found it, the URL, whether it was a profile, job post, Page or DM, what was asked for, which route you used, and the outcome.

Three incidents in a year is background noise. Three in a month is a campaign against your name, and only the log tells you which one you are in.

It is also the argument for keeping the owner. Nobody funds a permanent responsibility off the back of a story, and most people will fund one off the back of a list.

What good looks like

• One named owner with Page super admin rights, and a named deputy
• A search on the calendar at a stated frequency, with a record that it was done
• A careers page as the single source of truth, plus a published contact policy
• A pre-approved holding line, and someone allowed to send it
• A log, read once a quarter
• The super admin list reviewed whenever anyone leaves

None of that is a fire drill. It is a named responsibility with a check on a schedule, which is the only version that survives a busy month.

How NBK thinks about brand impersonation

This is a small process, not a project, and it fails the way small processes always fail: no owner, no trigger, no record.

We would put it in the same operating rhythm as approvals and reporting rather than treating each instance as an incident. The check then happens in the quiet months too, which is when catching something is cheapest.

The brands that handle this well are rarely the ones with the biggest legal team. They are the ones where somebody’s job description includes looking.

Next step

If nobody in your business can answer who would file the report, that is the gap, and it is a process gap rather than a platform one. If you want social to run with more clarity, rhythm and accountability, NBK can help build the system.