Fake LinkedIn job offer credential phishing — non-LinkedIn sender impersonates LinkedIn job alerts/InMail to harvest LinkedIn credentials, Social Security Number, bank account details, or government ID under guise of job application/onboarding
fake-linkedin-job-offer-credential-phish
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Phishing emails impersonating LinkedIn job notifications — either fake job offers designed to harvest LinkedIn credentials, or fake "you've been selected" messages that collect sensitive PII (Social Security Number, bank account details, government ID) under the pretense of job application processing or payroll onboarding. The emails mimic LinkedIn's notification style (InMail alerts, recruiter messages, job application responses) but are sent from lookalike domains (linkedin-careers-portal.net, linkedin-jobs-notifications.com) rather than @linkedin.com. Key facts: (1) Real LinkedIn never requests SSN, bank account numbers, or government ID in an email — those requests happen on secure, authenticated platforms after employment is confirmed; (2) Real LinkedIn InMail and job alerts come exclusively from @linkedin.com or @lnkd.in — any other sender is impersonating the platform; (3) The "no experience needed, $3,500/week, immediate hire" language is a signature of fake job recruitment scams; (4) The 24-hour link expiration creates artificial urgency; (5) The FTC reports job scams as the #2 most common fraud type in 2024, costing $501M. Warning signs: non-LinkedIn sender domain, SSN/bank account request in email, unsolicited offer at unrealistic pay, "respond within 24 hours."
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits 2,143+ signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 2,143+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started