Job fraud checker for India: is this job offer real?
Paste the message, the link, the recruiter's address or the offer letter. The checker compares them with official company domains and the fraud patterns the employers and the government publish — and shows every piece of evidence behind its answer.
- ≡Evidence, not opinion
- 🔒Nothing leaves your browser
- ₹India-specific
- βBeta · 63 employers on file
- 📨Paste what you receivedthe message, the link, the address — any one of them starts the check; each extra one adds evidence
- 🧾See the evidencecompany · job · recruiter · domain · payment, each ✓ verified, ⚠ unverified or ✕ not verified, with the source
- 🛡️Act on ita risk level, a score when the evidence supports one, and what to do now — never “this is definitely a scam”
The result appears here. 63 employers with official domains (39 with a resolved careers page) and 30 published fraud patterns are loaded with the page; the engine is deterministic and shows its arithmetic.
What this fake job offer checker — a job scam detector for India — actually verifies
🏢 Company and careers page
The company you name, or the brand the message drops, is looked up in a dataset of 63 large Indian employers — IT services, the Big Four, banks (including the new .bank.in domains), conglomerates, consumer internet, PSUs — each with its official domain and, where it resolved on the collection date, its careers page. A match tells you where the genuine listing would be. A company not on file is “not in the dataset”, which is not a mark against it.
📧 Recruiter and domain
The recruiter's address is classed as official (on the company's own domain), free-mail (Gmail, Yahoo, Rediff, Hotmail — the services TCS names as ones it “never sends out job offers from”), a lookalike (infosys-hr-india.com, tcs-careers.xyz), a government domain, or a corporate domain not on file. A big brand contacted from a free or lookalike address is scored as an impersonation indicator.
🔗 Job listing
The job link is compared with the company's official domain and careers page. A listing on Naukri, LinkedIn, Indeed or a social network is marked listed — where the job was posted, not a verification of the employer; TCS warns specifically about “imposter job vacancies on verified job portals”. Chat links (wa.me, t.me), shortened links and lookalike domains are flagged.
💸 Payment and documents
30 patterns transcribed from the employers' and the government's own advisories: registration, security-deposit, training, laptop, background-check and processing fees; crypto, transfer and gift-card rails; task-and-recharge schemes; Aadhaar, PAN, bank details or OTPs asked for before an offer; urgency, threats, secrecy, chat-only interviews; overseas jobs through unregistered agents; government or brand affiliation claimed from a non-official domain.
How the risk score is built — and when it is withheld
Every signal carries a weight from the pattern dataset. Weights add up within a category and each category is capped (payment 45, communication 30, job 35, documents 20, impersonation 30, recruiter 35), so ten urgency phrases cannot outweigh one fee demand. Verified facts earn credits — a recruiter on the official domain, a job link on the official site — which are halved when a payment request is present, because a real company name never makes a fee demand safe. The result is a number from 0 to 100 and a level: LOW under 30, MEDIUM from 30, HIGH from 55, CRITICAL from 75 or whenever a payment demand meets a free-mail, lookalike or impersonation signal.
The number is shown only when the message text itself was supplied — the patterns are defined over text — or when at least two other independent pieces of evidence were (a recruiter address, a job link, a matched company). With less, the level is INSUFFICIENT EVIDENCE and the page lists what it could not check. The same input always gives the same output; there is no model in the loop that could invent evidence or move the score. The full rules, the limitations and the false-positive cases are on the methodology page.
Sources the patterns come from
- Infosys — Recruitment Fraud AlertInfosys Limited · employer-fraud-advisory · read 2026-09-15 · conf 0.9
- TCS — Recruitment Fraud Alert (India careers)Tata Consultancy Services Limited · employer-fraud-advisory · read 2026-09-15 · conf 0.9
- MEA advisory — Indian nationals travelling to Cambodia and South-East Asia for jobs (reported by Akashvani News)Ministry of External Affairs, Government of India, via Prasar Bharati (newsonair.gov.in) · government-advisory · read 2026-09-15 · conf 0.8
- Sanchar Saathi — Chakshu: report suspected fraud communicationDepartment of Telecommunications, Government of India · reporting-channel · read 2026-09-15 · conf 0.9
- National Cyber Crime Reporting Portal and helpline 1930Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs · reporting-channel · read 2026-09-15 · conf 0.8
- eMigrate — registered recruiting agents for overseas employmentMinistry of External Affairs, Government of India · reporting-channel · read 2026-09-15 · conf 0.7
- Official careers pages — resolved on the collection dateEach company's own website · verification · read 2026-09-15 · conf 0.85
No complaint database, forum or social-media report is used: their terms and the complainants' privacy were not verified, and unverified complaints would put unverified evidence into the score. Report a fake job offer at cybercrime.gov.in (call 1930 if money moved) and the message itself on Sanchar Saathi.
Questions people ask
- How do I check whether a job offer is fake?
- Check three things the fraud never survives: the address the offer came from (a genuine employer writes from its own domain, never Gmail, Yahoo or Rediff — TCS and Infosys say so on their own fraud-alert pages), whether the role exists on the company's own careers page (type the address yourself; do not follow the link you were sent), and whether any money is asked for. No genuine employer charges a registration, deposit, training, laptop or verification fee. This checker does those comparisons against a versioned dataset of official domains and published fraud patterns, and shows every piece of evidence it used.
- Is a job offer on WhatsApp or Telegram always a scam?
- No. Recruiters do use WhatsApp to schedule calls. What the employers themselves say is that they do not conduct interviews or make offers on messaging apps: Infosys — "will not request for an interview on any instant messaging applications"; TCS — "does not approach through messaging apps". A WhatsApp-only process with no video or in-person interview, especially with a fee, is the pattern this page weights.
- What does "insufficient evidence" mean?
- That the page did not have enough independent evidence to give a number: no address to check, no link to compare, no text to scan. It lists exactly what could not be verified. A score is never estimated from a partial picture, because a low score built on nothing would be more dangerous than no score.
- What is the difference between "unverified" and "fraudulent"?
- "Unverified" means this page could not confirm something — the company is not in its dataset, the domain is not on file, the job link is not on the company's own site. Most small employers in India are "unverified" here and entirely genuine. "High-risk indicators" means the message contains the specific patterns the employers and the government name as fraud: a fee, a deposit, a free-mail recruiter for a big brand, a lookalike domain, pressure, secrecy. The page never states that something is definitely a scam.
- Does anything I paste leave my browser?
- No. The datasets and the engine are loaded with the page and the analysis runs in your tab; the site's security policy allows the page no connection to any other server. The message, the offer letter, the screenshot, the recruiter address and any number in them are not sent, logged or stored. Mobile numbers, Aadhaar and PAN in your text are masked before they are shown back to you.
- Where do I report a fake job offer in India?
- cybercrime.gov.in, the National Cyber Crime Reporting Portal — and if money has already been transferred, call 1930 immediately so the bank can be asked to hold it. Report the call, SMS or WhatsApp message itself on Sanchar Saathi (Chakshu). For an overseas job, check the recruiting agent on eMigrate before paying anyone. Tell the impersonated company too: TCS has careers@tcs.com and 1800-209-3111; Infosys has a validation link on its fraud-alert page.
- Can the checker read a screenshot or an offer-letter PDF?
- An offer-letter PDF with real text (produced by Word, Google Docs, an HR system) is read in your browser and scanned like pasted text. A scanned or image-only PDF cannot be read here. Screenshots are read only where the browser has a built-in text detector (some Chrome builds); otherwise paste the message text — the page loads no external OCR, so the image never leaves your device.