TLDR
Job seekers using AI to send mass applications (the "spray and pray" approach) may struggle to tell real recruiter replies from scam messages, because they no longer remember where they actually applied. Fraudsters exploit this confusion...
How it works
Job seekers using AI to send mass applications (the "spray and pray" approach) may struggle to tell real recruiter replies from scam messages, because they no longer remember where they actually applied. Fraudsters exploit this confusion...
Red flags
- Unsolicited message about a role you never applied for, or claiming to be from a real company without verifiable contact details. Promises of easy daily earnings (£500–£1,000/day for 1–2 hours) or requests to pay to unlock commissions. Push to continue the conversation on WhatsApp or via a suspicious link/call after only one brief exchange. What to do Keep a simple log of every job you apply to (company, role, date, listing URL) so you can verify who replies. Independently look up the employer's website and contact details
- never trust the contact info given in the message. Refuse to pay any fee, share ID documents, or install apps sent by a recruiter before verifying the vacancy out of band
What to do
- 1Red flags Unsolicited message about a role you never applied for, or claiming to be from a real company without verifiable contact details.
- 2What to do Keep a simple log of every job you apply to (company, role, date, listing URL) so you can verify who replies.
- 3Independently look up the employer's website and contact details; never trust the contact info given in the message.
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/news/2026/10/spray-and-pray-job-applications-could-make-it-harder-for-you-to-spot-a-scamFAQ
Is Job offer scams harder to spot when you apply to dozens of roles a day a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Unsolicited message about a role you never applied for, or claiming to be from a real company without verifiable contact details. Promises of easy daily earnings (£500–£1,000/day for 1–2 hours) or requests to pay to unlock commissions. Push to continue the conversation on WhatsApp or via a suspicious link/call after only one brief exchange. What to do Keep a simple log of every job you apply to (company, role, date, listing URL) so you can verify who replies. Independently look up the employer's website and contact details; never trust the contact info given in the message. Refuse to pay any fee, share ID documents, or install apps sent by a recruiter before verifying the vacancy out of band
What should I do first?
Red flags Unsolicited message about a role you never applied for, or claiming to be from a real company without verifiable contact details.; What to do Keep a simple log of every job you apply to (company, role, date, listing URL) so you can verify who replies.; Independently look up the employer's website and contact details; never trust the contact info given in the message.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.