AI Job Scams Target New College Grads, BBB Warns Class of 2026

What happened

Why it matters

How to protect yourself

Sources

What happened

The job market for the Class of 2026 looks especially good. If you are an AI scammer, that is.

Millions of new graduates are entering the workforce with clean credit, unprotected Social Security numbers, an active interest in remote roles, and almost no experience screening recruiter outreach. AI-powered fraud operations have noticed.

The Wisconsin Better Business Bureau warned this week that job scams have climbed to the third most-reported category on its national Scam Tracker, with new graduates and entry-level applicants among the most consistent targets. This case file examines how AI-powered job scams work, why the Class of 2026 is uniquely vulnerable, and what graduates and their families can do to spot fake recruiters before they lose money or identity.

The BBB warning

In a May 13, 2026, WBAY 2 Action News report tied to graduation season, Wisconsin BBB representative Lisa Schiller described the pattern in stark terms.

“Scammers are also skilled at drawing new grads in by promoting unrealistic wages,” Schiller said. “Something sounds too good to be true: the salary is very large, you can work remotely and everything just seems to be perfect.”

The warning is not based on anecdote. The BBB's national Scam Tracker has logged thousands of job scam complaints in 2026 alone. According to the BBB's internal analysis, job scams now rank behind only online purchase scams and investment scams in total reported volume.

Why graduation season is peak scam season

The timing of the BBB warning is not coincidental. Scammers know exactly when college seniors are most vulnerable.

• March through May: Peak application season. Seniors apply to dozens of jobs and may not remember every company they contacted.
• May through June: Graduation and job offer season. Seniors are eager to secure employment before student loan payments begin.
• June through July: Post-graduation move season. New graduates may be relocating to new cities, making in-person verification harder.

Scammers exploit this emotional state. A new graduate who has applied to 100 positions without hearing back is primed to respond positively to any outreach. The scammer's message arrives not as an intrusion but as a relief.

The Markup investigation: a job posting as bait

In January 2026, The Markup's reporters posted a real job listing and then watched what happened. The results were alarming. Within hours of the listing going live, they received dozens of AI-generated job applications with invented work histories, AI-staged video interviews that appeared live but were actually prerecorded, and recruiter impersonators using lookalike email domains and fake LinkedIn profiles.

The investigation demonstrated that AI has made it trivially easy for scammers to scale both sides of the job fraud equation. On the applicant side, scammers use AI to generate fake applications to real jobs, often as a precursor to identity theft. On the employer side, scammers impersonate real recruiters to extract money and data from real applicants.

The FTC alert: job offer texts

In April 2026, the Federal Trade Commission issued a consumer alert warning that unsolicited job offer texts are almost always scams. The FTC noted that real companies do not extend offers via text message from unknown numbers, real recruiters do not ask for payment to start a job, and real employers do not send checks to new hires to buy equipment.

The alert noted that job scam texts often claim to be from well-known companies (Amazon, Walmart, FedEx, UPS) and offer remote data-entry or package-processing positions that require no interview and pay unusually high wages.

How scammers extract money and data

Once a job seeker is engaged, scammers extract value in several ways.

• Identity theft via onboarding paperwork. The scammer sends official-looking documents: a W-4, a direct deposit authorization, an I-9. The victim provides their Social Security number, bank account information, and driver's license. The scammer then commits synthetic-identity fraud, opening credit accounts and taking out loans before disappearing.
• Fake-check overpayment. The scammer sends the victim a check to purchase home-office equipment from a preferred vendor. The check is fake but may take days to bounce. By then the victim has already wired money to the scammer's vendor account. The victim is liable for the full amount.
• Upfront fees. The scammer asks for a training fee, background-check fee, or onboarding deposit, typically $50 to $200 per victim, often payable in gift cards or cryptocurrency that are nearly impossible to trace or reverse.
• Data harvesting for future scams. Even if the victim sends no money, the scammer collects a name, email address, phone number, and college major, enough to craft personalized phishing attacks years later.

Why it matters

What is new in 2026 is not the concept of a job scam. It is the scale and sophistication that AI enables, aimed at a demographic that has almost no defense against it.

Fake recruiter profiles at scale

A single scammer can now run dozens of fake recruiter profiles in parallel. Each profile includes a plausible LinkedIn page created in minutes, a fabricated work history generated by AI, an AI-generated headshot indistinguishable from a real photograph, a real-sounding company-careers domain registered for a few dollars, and AI-generated job descriptions customized for each target industry. The cost is negligible. The scammer can target thousands of new graduates per day.

The AI-generated headshot is a critical component. A real recruiter's photo can be reverse-image searched. An AI-generated headshot is unique and has never existed before. A reverse-image search will return no matches, not because the person is real, but because the photo is synthetic. For more on detecting AI-generated faces, see our guide on how to tell if a photo is AI-generated.

The fake recruiter's email address often uses a lookalike domain: @company-careers.com instead of @company.com. The scammer registers these domains for a few dollars and sets up a professional-looking email signature. The victim sees “Recruiter Name, Talent Acquisition” and does not notice that the domain is wrong. For more on spotting lookalike domains, see our guide to phishing email warning signs.

Why the Class of 2026 is uniquely vulnerable

The BBB's warning focuses on new college graduates for good reason. Several factors make this demographic uniquely exposed.

• Clean credit, unprotected data. New graduates have not yet embedded their Social Security numbers in dozens of financial systems. Many have not frozen their credit with Equifax, Experian, or TransUnion. A scammer who obtains their SSN and date of birth can do significant damage before the victim knows their identity has been stolen.
• Eagerness and application volume. The average college senior applies to 30 to 50 jobs. Some apply to 100 or more. When a scammer reaches out claiming to be from a company the victim applied to, the victim may not recall applying but will assume they did. The scammer counts on this uncertainty.
• Remote work appeal. Scammers dangle remote positions with flexible hours. The remote label also makes it harder to verify the company's physical presence. A fake company with a fake address cannot be visited.
• Lack of experience. A mid-career professional knows what a real job offer looks like. A new graduate does not. The scammer's fake process may be their first exposure to a recruiting workflow, with no baseline for comparison.
• Financial pressure. Student loan payments typically begin six months after graduation. A scammer offering a $70,000 remote position with no experience required is offering a lifeline. The victim may want to believe it is real because the alternative, continued job searching and financial uncertainty, is stressful.

Third most-reported fraud to the BBB

The Wisconsin BBB's warning reflects a national trend. Job scams now rank as the third most-reported fraud category on the BBB's national Scam Tracker, behind only online purchase scams and investment scams. They have overtaken romance scams, tech support scams, and grandparent scams in reported volume.

The average loss per job scam victim is relatively low compared to investment fraud, typically $500 to $5,000, but the volume of victims is high. Scammers can target thousands of job seekers per day with minimal effort. As AuthentiLens reported in our coverage of the FBI's 2025 IC3 report, every complaint helps law enforcement identify patterns and build cases.

Job scams are also significantly underreported. Victims often feel embarrassed that they fell for a fake offer, or they believe the loss amount is too small for law enforcement to care about. Both assumptions are wrong. Reporting helps protect the next graduate who receives the same scam.

Robert Half's industry analysis

Staffing firm Robert Half, which places hundreds of thousands of professionals each year, has documented the spread of fake recruiter impersonation into legitimate staffing firm brands. Scammers use the Robert Half name, logo, and recruiter identities to approach job seekers with fraudulent offers. The firm now maintains a dedicated fraud alert page and encourages all candidates to verify recruiter identity through official channels before sharing any personal information.

How to protect yourself

You are not expected to become a forensic email analyst or a LinkedIn detective. But a few concrete habits will protect you from the most common AI job scam vectors.

1. Apply through the company's own careers page, not the recruiter's link

This is the single most important rule. If a recruiter contacts you about a role, do not use the link they send you. Open a new browser tab, type the company's official URL directly, and search for the job on the official careers page. If it is not there, the job is not there.

Confirm that the recruiter's email domain matches the company exactly. @company.com is real. @company-careers.net is not. @companya.com (typosquatting) is not. For more details, see our guide to spotting phishing emails.

2. Look up the recruiter on LinkedIn and check for a real history

A real recruiter has years of posting history, hundreds of connections at verifiable companies, a profile photo that returns matches on reverse image search, and recommendations from colleagues. A fake recruiter often has a brand-new account, very few connections, an AI-generated headshot that does not appear anywhere else online, and a vague or copied work history with no recommendations.

For more detailed techniques, see how to spot a fake social media profile and how to tell if someone online is real.

3. Treat any too-good-to-be-true offer as a scam by default

An $80,000 starting salary, fully remote, no interview required, immediate start date: these are not real entry-level job offers. The BBB's red-flag framing is direct. A large salary plus remote work plus a frictionless hiring process is the scam template. Real companies interview candidates. Real companies verify qualifications. Real companies do not hire people they have never spoken with for six-figure salaries.

4. Never pay anything to start a job

Real employers do not ask for training fees, background-check fees, certification fees, onboarding deposits, or equipment deposits. Real employers do not send checks to new hires to purchase equipment. A check sent before you start work is almost always a fake-check overpayment scam. The check will bounce. You will be liable for the full amount. The scammer will have disappeared with the money you sent to their vendor.

5. Protect your Social Security number until you have verified the offer independently

Do not provide your SSN, bank account information, or driver's license until you have verified the job through an independent channel: a call to the company's main line (not a number the recruiter provided), a meeting at the company's physical office, or confirmation from someone who already works there. Once your SSN is out, it can be used for synthetic-identity fraud that may take years to fully resolve.

6. Scan it with AuthentiLens

When you receive a suspicious job offer, recruiter message, or employment opportunity:

• Paste the email into the Scam Text Checker. AuthentiLens analyzes the domain, headers, and language for scam indicators.
• Paste the LinkedIn profile URL into the Fake Profile Checker. AuthentiLens checks for AI-generated headshots and pattern-of-life anomalies.
• Upload the offer letter to the AI Image Detector. AuthentiLens detects AI-generation signals, formatting inconsistencies, and fake company seals.

If you have already been scammed

Take these steps immediately.

1. Stop. Do not send more money. Do not provide more information. Do not deposit any additional checks.
2. Contact your bank. If you provided bank account information, call your bank immediately. They can freeze the account or issue a new account number.
3. Freeze your credit. Contact Equifax, Experian, and TransUnion. A credit freeze is free and prevents scammers from opening new accounts in your name.
4. File with the BBB Scam Tracker. Go to bbb.org/scamtracker.
5. File with the FTC. Go to ReportFraud.ftc.gov.
6. File with the FBI's IC3. Go to IC3.gov. As AuthentiLens reported in our coverage of the FBI's 2025 IC3 report, every complaint helps law enforcement identify patterns and build cases.
7. Tell your career center. If you are a current student or recent graduate, tell your college's career center. They may warn other students and help you find legitimate employment.

Advice for parents and families

If you have a college senior or recent graduate in your family, start the conversation now. Many new graduates do not know that job scams exist at this scale. Review offers together. A second set of eyes may catch things they missed.

Remind them that real employers do not ask for money. This is the single most important rule. No legitimate job requires a training fee or onboarding deposit. If they do fall for a scam, do not shame them. Encourage them to report it. The shame belongs to the scammer, not to the victim.

For related coverage, see our report on AI voice cloning driving social media scams to $2.1B in 2025 and our analysis of how AI fraud has become industrialized.