Offer letter verification — how to confirm it’s real and avoid job offer scams

Stop. Answer this first

Fail-fast classification

How did you get the offer? (official portal / recruiter email / messaging app / personal email)
Can you verify the employer independently? (official website + switchboard number + public presence)
Do you have a real interview trail? (not “text-only interview”, not instant offer)
What action are they pushing? (sign now / send ID / pay fee / buy equipment / change payroll)
Are they asking you to use their link? (default: don’t open links from the email thread until verified)

If you can’t confirm the employer + channel via independent sources, treat it as Route C.

Routes A/B/C

Hard rules

Don’t open links from the email thread until you confirm the employer via independent sources.
Never pay a fee to receive an offer, start onboarding, or “activate payroll” (especially via gift cards/crypto/wire transfer).
Never send ID, SSN, bank details, or OTP codes before you confirm the employer + official process.

What to capture (30 seconds)

Company name + recruiter name + email domain
Any job post link / role title / salary range as stated
What they asked you to do (copy/paste exact line)

Route A — verified employer + verified channel (likely legitimate; now verify the offer terms)

Verify the employer independently (official website + switchboard/HR contact listed on the site).
Verify the channel: portal you open manually or email confirmed via official directory/website contact.
Find the portal from the company’s official website careers page (or confirm it by calling the switchboard).
Sign only after you open the official portal manually (not via the email thread link).
Then move to Offer checks and confirm the terms match what was discussed.

Route B — maybe real, but unclear / you’re being rushed (convert to official confirmation)

Ask for a phone number listed on the official company website and call that (not the signature number).
Ask for the official HR/recruiting contact method (portal, HR mailbox on company domain).
Until confirmed, don’t open links, sign, or send documents.
If they refuse verification or push urgency → treat it as Route C.

Route C — high risk (job offer scam patterns) (default: treat as scam until proven otherwise)

Default: treat as scam until verified.
Fees to receive an offer/onboarding/payroll = scam pattern.
Never sign via a link from the email thread. Only sign after you open the official HR/vendor portal manually.
If they ask for bank/payroll changes → see Payroll email: scam or real?
If the overall story feels off → use the primary hub: Job offer scam or not?

Biggest failure mode: you treat the “offer letter PDF” as proof. It’s not proof. The proof is the employer + channel confirmed independently.

What to verify in the offer (practical checks)

Offer letter must match reality

Employer legal entity (the name on the contract, not just brand).
Role + compensation (salary/rate, currency, pay schedule, bonus terms).
Start date + location (remote/on-site/hybrid, work authorization expectations).
Equipment policy (company ships equipment vs you “buy and get reimbursed”).
Onboarding flow (portal/vendor process, not “reply with documents”).
Signing method: only after you open the official portal manually.

High-risk terms that often indicate a scam

They want you to buy equipment from a specific “vendor” or via a check they send you.
They want ID + bank details before you’ve verified the employer channel.
They want you to pay for training/background check via gift cards/crypto/transfer.

Safe sharing rules (minimum disclosure)

Safe basics (before verification)

Full name + general location (city/country) — if needed
Resume-level history you already made public
Scheduling availability (for interviews)

Sensitive data (only after verified employer + official process)

Government ID / passport / SSN / tax forms
Bank details / direct deposit forms
One-time codes (OTP), “verification codes”, login links

If they want sensitive data by email attachment or “quick form link”, assume Route C.

Reply templates (copy-ready)

Template 1 — request official verification path (no links)

Hi,

Before I sign or share any documents, please confirm the official verification path:
- the HR/recruiting contact email on your company domain, or
- the official candidate portal name and the standard login method.

Until I can confirm via a phone number listed on your official website, I won’t open links or share sensitive data.

Thanks,
[Your name]

Template 2 — confirm via switchboard / website phone number

Hi,

To verify the offer, I will call the main company phone number listed on your official website and ask to confirm:
1) the recruiter/HR contact name
2) the official signing/onboarding process and portal

Until confirmed via that number, I won’t open any links or provide any personal or payroll data.

Thanks,
[Your name]

Template 3 — decline suspicious requests (fee / ID / payroll)

Hi,

I’m not able to pay any fees to receive an offer, start onboarding, or “activate payroll.”
I also won’t share ID or bank details by email or via links from this message thread.

If this offer is legitimate, please route onboarding through the official HR or candidate portal process.

Thanks,
[Your name]

Red flags (stop signals)

Instant offer with no real interview trail or “text-only interview.”
Fees to receive the offer, start onboarding, or “activate payroll.”
They want you to reply with ID/paystubs to an email address.
Equipment purchase via their vendor/check or weird reimbursement flow.
Lookalike domains (extra characters, odd TLDs) or free email accounts.
Urgency + secrecy (“sign in 2 hours”, “don’t tell anyone”, “limited slots”).

Hard rule

If they refuse independent verification (website phone number, portal, HR mailbox) and still push for action → stop.

Risk → actions

Low

Employer + channel verified

Verify offer terms, sign only via portal you open manually, and proceed with official onboarding.

Medium

Unclear channel / being rushed

Call a phone number listed on the official website. Don’t open links from the email thread.

High

Fees, ID/payroll asks, suspicious domains, or weird equipment flow

Stop sharing. Treat as scam. Use Job offer scam or not? to classify and de-risk.
If payroll/bank details are involved: Payroll email: scam or real?

Related routes

Job offer scam or not? — primary hub for offer scam patterns and decision flow
Payroll email: scam or real? — if they ask for bank details, tax forms, or payroll setup
Employment verification request — if they say “we need to verify your employment” (common scam pretext)
Background check request — if they claim it’s a screening/vendor flow
Salary payment delayed — if “onboarding/verification” is used as an excuse to delay pay

Rule: don’t “verify the PDF.” Verify the employer + channel independently, then choose the right route.

FAQ

Is an offer letter PDF proof that the offer is real?

No. A PDF is easy to fake. Proof is the employer + channel verified independently (official site + phone + portal/HR path).

What’s the safest first move after receiving an offer letter?

Verify the employer and the channel using independent sources. Don’t open links from the email thread until confirmed.

What if they want me to sign quickly “to secure the role”?

Urgency is common in scams. Tell them you will sign only after you confirm via a website phone number and open the portal manually.

What if the email domain looks official?

Domains can be spoofed or accounts compromised. Confirm via a phone number from the official website or company directory.

Is DocuSign always safe?

DocuSign can be legitimate, but links can be spoofed. Only proceed after you independently confirm the employer, then open the signing flow from the official portal or by contacting HR via a phone number from the official website.

They asked for my ID to “generate the contract.” Is that normal?

Only after the employer + official onboarding flow is verified. If it’s requested via email attachment or random link, treat it as high risk.

They asked for bank details to “set up payroll.”

High risk until verified. Use the official payroll onboarding process only, and use the payroll scam page if this came via email thread.

What if they ask me to pay for a background check?

Don’t pay a fee to receive an offer or start onboarding. If screening is real, it should be through an official vendor portal confirmed independently.

What if my future employer insists I must respond personally?

You can respond personally, but still route verification through HR/portal. You can confirm your HR contact (company-domain email) and ask them to use that official path.

What are the most common job offer scam patterns?

Text-only interviews, instant offers, fees, equipment purchase schemes, and requests for ID/bank details via email.

What if I already sent sensitive data?

Stop the conversation, secure your accounts, contact your bank if payroll/bank details were shared, and monitor for identity misuse.

What’s the simplest rule to avoid most losses?

Don’t open links or sign from the email thread until you confirm the employer via an official phone number and portal/HR process.

External security references

These are general safety references. For offer verification, rely on independent confirmation (official site phone number + official portal/HR process).