{"success":true,"data":{"id":"fake-linkedin-job-offer-credential-phish","label":"Fake LinkedIn job offer credential phishing — non-LinkedIn sender impersonates LinkedIn job alerts/InMail to harvest LinkedIn credentials, Social Security Number, bank account details, or government ID under guise of job application/onboarding","description":"Phishing emails impersonating LinkedIn job notifications — either fake job offers designed to harvest LinkedIn credentials, or fake \"you've been selected\" messages that collect sensitive PII (Social Security Number, bank account details, government ID) under the pretense of job application processing or payroll onboarding. The emails mimic LinkedIn's notification style (InMail alerts, recruiter messages, job application responses) but are sent from lookalike domains (linkedin-careers-portal.net, linkedin-jobs-notifications.com) rather than @linkedin.com. Key facts: (1) Real LinkedIn never requests SSN, bank account numbers, or government ID in an email — those requests happen on secure, authenticated platforms after employment is confirmed; (2) Real LinkedIn InMail and job alerts come exclusively from @linkedin.com or @lnkd.in — any other sender is impersonating the platform; (3) The \"no experience needed, $3,500/week, immediate hire\" language is a signature of fake job recruitment scams; (4) The 24-hour link expiration creates artificial urgency; (5) The FTC reports job scams as the #2 most common fraud type in 2024, costing $501M. Warning signs: non-LinkedIn sender domain, SSN/bank account request in email, unsolicited offer at unrealistic pay, \"respond within 24 hours.\"","tier":"danger","category":"phishing","isThin":false}}