Any payment request
A "registration fee", a "refundable security deposit", payment for an offer letter, or payment for a mandatory training or certificate before you start. A real employer pays you — never the other way round.
Guides for your first job
Fresher job scams follow a small, recognisable set of patterns. This page covers the red flags, what to do if you have already paid, and a checklist before you ever share Aadhaar or PAN.
A real employer pays you. It never asks you to pay it — not for an offer letter, not for training, not for a "registration fee", not as a "refundable" deposit for equipment. If money is requested at any point in a hiring process, stop and verify independently before doing anything else.
A "registration fee", a "refundable security deposit", payment for an offer letter, or payment for a mandatory training or certificate before you start. A real employer pays you — never the other way round.
The entire process — interview, offer, instructions — happens over WhatsApp or a personal number, with no official email, no call on a landline or verified extension, and no presence on the company's real careers page.
An offer "from TCS HR" or similar arriving from a Gmail, Yahoo or other free personal address instead of the company's own domain (a real TCS email ends in @tcs.com, not @gmail.com). Check the sender address, not just the display name — a display name can say anything.
An offer that arrives after a token phone call with no technical questions, no assessment, and no verification of your actual background — for a role that would normally involve a proper interview process.
"This offer expires in 2 hours", or demands for Aadhaar, PAN or bank details before any formal offer letter exists. Urgency is a pressure tactic, not a normal hiring practice.
A salary well above the market rate for a fresher role, a vague job title, and no clear description of daily work — often paired with "work from home, flexible hours, no experience needed" for a role that would not normally offer that combination.
This is written so you can recognise the pattern from the outside, not as instructions for anyone else. If a real process you are in matches several of these in sequence, that is the signal to stop and verify.
Act quickly. The steps below are the real, official channels for this in India — not company-specific, because the right first move is the same whoever contacted you.
Do not send any more money, even if told the previous payment will be "forfeited" otherwise. That claim is itself part of the pressure.
If you paid by card, UPI or bank transfer, report it to your bank right away and ask about a chargeback or transaction dispute. Faster action generally means a better chance of recovery.
cybercrime.gov.in is the Government of India's official portal for exactly this. You can also call the national cybercrime helpline, 1930, which is built for financial fraud specifically.
A local police complaint (FIR) creates an official record, which your bank or the cybercrime portal may ask for, and adds to the pattern authorities use to act against repeat offenders.
If you have already shared Aadhaar, PAN or bank details, treat that channel as compromised. Do not respond further, and consider a fraud alert with your bank if financial details were shared.
These documents are sensitive and hard to "undo" sharing. Go through this before you send either one.
Every large Indian employer publishes its own careers page. If an offer, interview link or posting does not trace back to the company’s real domain, treat it as unverified until it does.
A lookalike domain (extra words, a different extension, misspellings) is one of the fastest tells. When in doubt, navigate to the company’s site yourself by typing the address, rather than clicking a link you were sent.
The simplest protection
Keep every application in one place, sourced from a verified posting, so you always know exactly where an offer is supposed to have come from.
Job scam safety, answered plainly