Fake HR Calls and Emails: How Recruitment Impersonation Scams Work

Last updated: 11 October 2026 · By the Asuraa Team

Quick answer: Fake HR calls and emails impersonate real companies to collect fees or personal data, usually through instant 'selection' followed by a registration, training or deposit charge. Genuine employers do not charge: TCS states it never asks for payment at any stage and sends hiring emails only from @tcs.com. If you have paid, call the cyber crime helpline 1930 immediately.

Key takeaways

• TCS states that it does not ask for any payment or security deposit from candidates at any stage of recruitment.
• TCS says its hiring emails come only from @tcs.com and never from free services such as Gmail, Yahoo, Rediff or Hotmail.
• TCS warns that scammers use fake portal postings, social media profiles with real employees' names, and look-alike email IDs.
• Wipro asks candidates to report suspicious job offers to helpdesk.recruitment@wipro.com.
• Anyone who has lost money to a cyber fraud should call the national cyber crime helpline 1930 or report at cybercrime.gov.in.

A call from "HR at a top IT company" offering you a job you barely applied for is exciting, which is exactly why scammers use it. Recruitment impersonation scams borrow real company names, real employee names and convincing paperwork to collect fees or personal data. This guide explains how these scams run step by step, how to verify any recruiter in minutes, and what to do if you have already shared money or documents.

What is a fake HR call or email scam?

It is a fraud in which someone pretends to be a recruiter from a real company, or from an agency working for one, to take money or personal information from job seekers. The scammer usually contacts you first by phone, SMS, WhatsApp, Telegram or email, offers a role or an "interview slot", and then asks for a fee, a deposit or sensitive documents.

These scams target freshers heavily because freshers are applying widely, are less familiar with how hiring actually works, and are under pressure to land a first offer.

How do recruitment impersonation scams work?

They follow a predictable pattern. TCS's recruitment fraud alert page lists the tactics it sees, including fake agencies that charge for jobs, training, internships or interviews; social media profiles that impersonate the company using real employees' names; fake postings on legitimate job portals; online test scams that harvest personal data or demand charges; phishing emails; and unsolicited SMS, WhatsApp or Telegram messages followed by fake registration forms, admit cards, interview calls, appointment letters and look-alike email IDs.

In practice, a typical scam runs like this:

1. First contact. A call or message says your profile was "shortlisted" from a job portal, often for a well-known company.
2. Fake process. A short phone "interview" or an online test, sometimes with a professional-looking link, makes it feel real.
3. Instant selection. You are told you have cleared, usually within a day, and that seats are limited.
4. The ask. A fee appears: registration, training, laptop, background verification, uniform or a refundable "security deposit". Or you are asked for Aadhaar, PAN, bank details, OTPs or selfies.
5. Pressure. Deadlines of hours, not days, and warnings that the offer will go to someone else.
6. Disappearance or escalation. After the first payment, either contact stops or a second, larger fee is demanded.

What are the red flags of a fake recruiter?

The single clearest red flag is any request for money. The table compares what scammers do with what TCS says about its own process.

Other employers publish similar warnings. Wipro's fraud alert page asks candidates to report suspicious mail, advertisements or people offering Wipro jobs to helpdesk.recruitment@wipro.com.

How do you verify a recruiter call or email?

Verify through a channel you find yourself, never through contact details the caller gives you. A five-minute check:

1. Check the sender's domain carefully. Compare it letter by letter with the company's official website. Look-alike domains swap or add a character.
2. Find the role yourself. Go to the company's official careers page and search for the job. If it is not there, be suspicious.
3. Use official verification routes. TCS lists careers@tcs.com and a toll-free line, 1800-209-3111, and an offer verification tool. Wipro lists helpdesk.recruitment@wipro.com for reporting.
4. Check the person. Look up the recruiter on LinkedIn and confirm their current employer. Our guide on how to verify a recruiter on LinkedIn shows what to look for.
5. Never pay and never share OTPs. No genuine hiring step needs your OTP, UPI PIN or a payment link.

If you already have an offer letter, our guide on how to check if an offer letter is fake walks through it line by line.

What information should you never share before a verified offer?

Never share OTPs, UPI PINs, card details, net banking passwords or remote-access app codes with anyone, at any stage. Those are never part of a hiring process. Beyond that, hold back scans of Aadhaar, PAN, bank statements and certificates until you have verified the employer and received an offer through an official channel.

Genuine employers do collect identity and bank documents, but at onboarding, through their own HR portal or official email, after you have accepted a verified offer. A request for these documents during the first phone call, over WhatsApp, or before any interview is a strong sign that the goal is your identity, not your hiring. If a document must be shared, consider adding a note across the copy such as "for employment verification with [company], [date]" to limit reuse.

What should you do if you have paid or shared documents?

Act within hours, because speed improves the chance of stopping the money. Steps:

1. Call 1930 immediately. The national cyber crime helpline is listed as 1930, with complaints also accepted at cybercrime.gov.in, as the Department of Telecommunications' Sanchar Saathi portal notes for anyone who has lost money.
2. Inform your bank. Ask it to block the transaction or card and change your net banking and UPI credentials.
3. Save evidence. Screenshots of chats, call logs, emails, payment receipts and the scammer's numbers and IDs.
4. Tell the company being impersonated. Use its official reporting address, such as Wipro's recruitment helpdesk or TCS's careers email.
5. Watch your identity documents. If you shared Aadhaar or PAN, monitor for misuse and see our guide on identity theft in job applications.

If you have not lost money but received a suspicious call, SMS or WhatsApp message, Sanchar Saathi's Chakshu facility lets you report suspected fraud communication, including impersonation. Our guide on how to report a job scam in India covers each channel.

What do most guides on fake HR scams get wrong?

Most guides say "check that the email is from the company domain" and stop. That is necessary but not enough. TCS specifically warns about look-alike email IDs, and scammers also post fake jobs on real job portals and use real employees' names on social media. A correct-looking name or a listing on a known portal does not prove anything.

The reliable test is the direction of verification. Do not verify a recruiter using the phone number, link or email they gave you. Start from the company's official website, find its careers page and contact details yourself, and confirm from there. Combined with the "no payment, ever" rule, that one habit stops almost every impersonation scam.

Do genuine companies ever call from personal numbers?

Sometimes recruiters and hiring agencies do call from mobile numbers, so a personal number alone does not prove fraud. What matters is what happens next: a genuine process directs you to an official application portal or company email address, does not ask for payment, and does not need your OTPs or bank details. EPFO's member portal makes a similar point about its own calls, stating that it never asks for Aadhaar, PAN or bank details over the phone.

For the full picture of job fraud, from task scams to fake work-from-home offers, see our complete guide to job scams in India.

Related guides

• Job Scams in India: The Complete Guide to Spotting and Reporting Them

FAQ

How do I know if an HR call is fake?

Be suspicious if you are selected without a proper process, rushed to decide within hours, asked to pay any fee or deposit, or asked for OTPs, bank details or Aadhaar over the phone. Verify by visiting the company's official careers page yourself. TCS, for example, says it never charges candidates and sends hiring emails only from @tcs.com.

Do companies like TCS charge a registration or training fee?

No. TCS's recruitment fraud alert page states that it does not ask for any payment or security deposit from candidates at any stage of the recruitment process, and that it is not responsible for money paid to fraudsters. Any request for a registration, training, laptop or verification fee in a company's name should be treated as a scam.

What should I do if I paid money to a fake recruiter?

Call the national cyber crime helpline 1930 immediately and file a complaint at cybercrime.gov.in. Contact your bank to block the transaction and change your banking and UPI credentials. Save screenshots, receipts and the scammer's numbers, and report the impersonation to the company through its official recruitment email.

Can scammers send emails that look like they come from a real company?

Yes. TCS specifically warns about look-alike email IDs, where a domain is changed by a character or two, along with fake postings on real job portals and social media profiles using real employees' names. Compare the domain letter by letter with the official website, and verify through contact details you find yourself.

Where can I report a fake job call or message in India?

If you lost money, call 1930 or report at cybercrime.gov.in. If you only received a suspicious call, SMS or WhatsApp message, the Chakshu facility on the Sanchar Saathi portal accepts reports of suspected fraud communication, including impersonation. Also inform the impersonated company, for example Wipro's helpdesk.recruitment@wipro.com or TCS's careers@tcs.com.

Final thoughts

Treat every unexpected "you are selected" call as unverified until you confirm it through the company's own website, and never pay to get a job. When you search, start from the jobs themselves and apply directly, for example through Asuraa's free job search, then confirm the employer on its official careers page.