Job seekers looking for employment in the United Arab Emirates (UAE) are strongly advised to conduct basic checks before accepting any offers, as fraudulent recruiters increasingly use convincing websites, professionally designed documents, and social media profiles to attract candidates.
Although accepting a job at a fraudulent company does not automatically result in criminal liability for the candidate, legal experts warn that risks can arise if an individual knowingly assists in criminal activity or continues to handle suspicious funds after noticing red flags.
Igor Abalov, Managing Partner of Lawford Legal Advisors FZ-LLC in Dubai, noted that the potential liability of a job seeker largely depends on their own conduct and whether they knew or should have recognized that they were participating in illegal activities. He emphasized that taking a position in a company that later turns out to be fake or criminal does not imply automatic criminal guilt.
According to Abalov, the decisive factor is the job seeker's behavior and state of mind: what they knew, what warning signs they noticed, and what action they took after suspicions arose. The risk increases when a candidate intentionally facilitates a crime or deliberately engages in illicit income.
Under UAE anti-money laundering legislation, processing, transferring, converting, or using funds known by an individual to be proceeds of criminal activity can lead to criminal liability. Knowledge can also be inferred from circumstances. Warning signs may include offers of disproportionately high pay for simple transfers, demands to use a personal bank account for corporate funds, splitting payments, sending money to strangers, converting funds into cryptocurrency, or deleting messages.
Abalov explained that an 'unintentional mistake' is legally distinct from willful complicity in an offense, but a simple claim of 'not knowing' may be insufficient if numerous obvious warning signs were present.
His advice is very simple: as soon as a job seeker discovers an offer is fraudulent, they must cease participation, preserve evidence, and report it to their bank and the authorities. One of the clearest signs is the supposed employer asking for money to be received or transferred through the new employee's personal bank account. Abalov stated that a legitimate employer should not use a new employee's personal account as a channel for corporate payments.
If the funds have not yet been transferred, candidates should refuse the request, stop communicating with the suspected scammer, and save the correspondence. If the funds have already been deposited into the account, they must not be withdrawn, transferred to another account, or returned using the bank details provided by the scammer. Instead, they must immediately notify their bank's fraud or compliance team and follow their instructions.
Even if the account holder was initially unaware that the funds were linked to criminal activity, the account may still be investigated or transactions suspended as part of an inquiry. Abalov also advised against taking commissions, converting money to cryptocurrency, splitting payments, providing false payment descriptions, or deleting messages, as such actions could later be viewed as evidence of conscious involvement.
If someone has already transferred money, provided identification, or given access to a bank account, experts recommend acting immediately. The first step is to stop all further payments, including requests for additional funds for 'salary disbursement,' return processing, visa acquisition, or fulfilling any other alleged employment requirement. Then, candidates should contact their bank, report the suspicious transactions, and request tracking or reversal of the transfer, where possible. If bank cards or digital banking access may have been compromised, the relevant services should be blocked, and credentials changed.
The matter should also be reported to the police or the appropriate cybercrime channel, providing as much evidence as possible. This includes job advertisements, emails, phone numbers, websites, messages, contracts, receipts, bank statements, and data on involved parties. If identification was provided, candidates should keep a record of exactly what was given and monitor for potential misuse, including attempts to open accounts or obtain financial services in their name.
Anyone who has given a suspected scammer access to a device or online account must change passwords from a secure device, terminate active sessions, enable multi-factor authentication, and check for suspicious email forwarding rules or remote access software. Candidates should also avoid deleting chats or other digital evidence.
For Sumit Pant, Head of e-care at TASC Outsourcing, the first step is to slow down and verify the possibility, especially if the initial contact is made via social media or messenger. Candidates should verify the existence of the company, the availability of the vacancy on an official or trusted platform, and whether the contact person is genuinely affiliated with the organization. Pant noted: 'Candidates can visit the company's official website and contact them directly using independently obtained contacts to confirm the legitimacy of the vacancy and the recruiter.'
He also advised paying attention to the hiring process itself. Vague job descriptions, lack of interviews, or pressure to accept an offer immediately, as well as communication exclusively via a personal phone number, should prompt further verification.
Niki Wilson, Development Manager at Genie Recruitment, stated that one of the clearest rules for job seekers is that they should never pay for employment. This includes requests for fees for resume writing, mandatory training, employer introductions, interviews, or access to vacancies. Wilson stressed: 'Candidates should never pay to get a job.'
She recommended that candidates independently verify the company, its website, and its presence on LinkedIn, as well as the identity of the recruiter they are dealing with. Wilson added that scams can look very professional because fake recruiters are capable of creating convincing LinkedIn profiles, websites, email addresses, and employment documents; therefore, a professional appearance is no longer a guarantee of authenticity.
'Unusually high salary for the job level, immediate offer without a substantive interview process, or urgent requests for money transfers should also raise concerns,' she said.
Experts also advise job seekers not to rush into providing sensitive personal information. Pant believes that in the early stages of hiring, candidates are usually only required to provide information related to their professional experience and qualifications. Copies of full passports and Emirates IDs, bank details, card data, passwords, one-time passwords, and account login details should not be shared with an unverified contact.
Wilson noted that bank details should generally only be provided after the candidate has actually joined the company, and this information is necessary for legitimate payroll or onboarding purposes. Passports and Emirates IDs may be requested at later stages for legal employment procedures, visa acquisition, or registration, but candidates must first verify who is requesting the documents and why.
For private sector employment, job seekers must independently verify the employer and the job offer through official channels. Job offers approved by the UAE Ministry of Human Resources and Emiratisation (MoHRE) have a serial number or barcode that can be used for verification. Candidates should also contact the company using a phone number or email address obtained independently, rather than relying solely on data provided by the recruiter. They must check the company's trade license, official website, physical presence, and the identity of the person conducting the interview.
Another important sign of danger is any request to pay recruitment or employment fees. According to UAE labor law, employers do not have the right to pass recruitment and employment costs onto employees.
If the hiring process turns out to be fraudulent later, keeping a complete record will help establish what happened and demonstrate that the candidate acted in good faith. Experts recommend retaining the original job advertisement, URL, recruiter profile, emails, phone numbers, voice messages, contracts, attachments, payment records, and copies of any provided documents. Candidates should also document any attempts at self-verification of the employer, as well as bank notifications, police reports, and complaints. A simple chronology showing dates, received instructions, payments made, actions taken, and the moment suspicion arose can also help investigators trace the movement of money and distinguish victims from organizers of the fraud.
The takeaway for job seekers is simple: do not let excitement or the urgency of receiving an offer override basic checks. A legitimate employer should be able to explain who they are, what the job entails, why data is required, and why any payment or financial transaction is necessary. If an offer depends on sending money, using a personal bank account, or immediately providing sensitive information, candidates should stop and independently verify the possibility before proceeding.