Stay safe while you job hunt

Job seekers often face sophisticated online scams. Familiarize yourself with the patterns below so you can make confident, informed decisions.

Money laundering scam emails usually pose as legitimate job opportunities and may claim to have sourced your profile on a platform such as HotJobs.lk. They commonly use titles like 'transaction manager' or 'accounts assistant' and encourage you to handle payments on someone else's behalf.

These scams often follow five predictable stages:

1. You respond to a fake job offer.
2. The scammer asks for your bank details.
3. A cheque is deposited into your account.
4. You are instructed to transfer part of the funds elsewhere (often via services such as Western Union or MoneyGram) and keep the remainder as your payment.
5. The cheque bounces, leaving you responsible for the debt.

Falling victim can be distressing, harm credit ratings, and raise suspicion of criminal activity.

Watch for these warning signs:

• The role promises substantial income for working from home with vague duties such as processing transactions.
• The salary offered is unrealistically high for the work described.
• You are asked for bank details before any formal onboarding.
• You never speak to a real person—communication occurs only via email or instant message.
• The email includes obvious spelling or grammar errors and may originate from an unusual domain.

If you're suspicious of any message you receive, contact us with the subject line and the sender's email address.

Phishing emails mimic reputable organizations to steal personal details for fraud or identity theft. The sender will often request your username, password, or that you log in via a fake secure link.

When reviewing an email that claims to be from HotJobs.lk, consider the following:

• HotJobs.lk will never ask you to share your password in response to an email or phone call.
• Spelling and grammar mistakes are common in phishing messages that originate outside Sri Lanka.
• We will never ask you to download unknown files—your HotJobs.lk account details live securely online.
• Legitimate emails will not threaten to close your account unless you supply sign-in details or download software.

If an email feels suspicious, forward it to us with the subject line and sender's address so we can investigate.

Spoofing occurs when fraudsters copy a legitimate website to make their fake organization appear trustworthy. These sites often look identical but use a slightly different web address (for example, .biz instead of .com or .lk).

If you land on a suspicious site after interacting with HotJobs.lk, stop and contact us immediately so that we can investigate the URL.

Identity theft happens when someone steals enough personal information to impersonate you for financial gain, such as opening bank accounts or securing credit.

Reduce your risk by following these guidelines:

• Never share sensitive information (bank details, National Identity Card number, or passport copy) in response to unsolicited emails.
• Watch for spelling and grammar issues in incoming messages.
• Never provide your sign-in details via email.
• Contact the police immediately if you suspect you have been targeted.

Security is a shared responsibility. The practices below minimize exposure and ensure you maintain full control of your data.

Follow these password guidelines to keep your account safe:

• Use a password that is personal and does not include your name, email address, or the word 'password'.
• Mix letters and numbers.
• Never share your password—even with people claiming to represent HotJobs.lk.
• Update your password at least every three months.
• Memorize your password so you don't have to write it down.
• Use unique passwords for different websites.

Uploading your CV helps employers find you, but avoid including these sensitive details:

• National Identity Card number
• Driving license number
• Bank account details
• Credit card information
• Passwords or security answers

Keep these top tips in mind whenever you search or apply for jobs online:

• If an opportunity sounds too good to be true, it probably is—especially if it offers high pay for limited work.
• Do not provide personal or banking details before you have progressed through interviews and accepted an offer.
• Never process funds through your personal bank account on behalf of a company.
• Look for 'https://' in the address bar before entering sensitive information.
• Remove unnecessary personal information—such as your NIC number—from your CV.
• Treat poor spelling or grammar as a warning sign.
• Never share your HotJobs.lk username or password via email—we will never request it.
• Be cautious of recruiters who refuse to speak over the phone or meet in person before making an offer.
• Keep your passwords secure and updated every three months.
• Report any suspicious contact related to HotJobs.lk so our Customer Support Team can investigate.

If you suspect you have been a victim of online fraud, notify national fraud and internet crime reporting authorities for further guidance, and let us know so we can support you.