"45% of HR professionals admit they regularly post jobs they have no intention of filling. Another 48% do it 'occasionally.' That's 93% of the people running hiring." — Clarify Capital, 2025 survey of 1,000 US employers.
The 2026 job market has two overlapping mirages. First: ghost jobs — postings that companies deliberately publish with no intent to hire, or that have been "evergreen" for months past the actual fill. Second: scam recruiters — hijacked LinkedIn accounts, fake staffing agencies, and DMs that pivot to WhatsApp within two messages.
Both problems exploded post-COVID. The FTC counted zero "task/job" scam reports in 2020. By H1 2024 alone, that number was 20,000+ — a jump of literally infinity. Ghost jobs weren't even a tracked category before 2022 because employers didn't post at this scale; the pandemic-era rehiring wave normalized "always-on" listings, and companies never turned them back off.
Trust in the biggest hiring platforms is corroding fast. LinkedIn alone removed 80.6 million fake accounts at registration in the second half of 2024, up from 70.1M in H1 — over 150 million blocked in a single year, and those are the ones that didn't get through.
We pulled the numbers from Clarify Capital, Forbes/Greenhouse, LinkedIn Trust & Safety, the FTC, and the FBI IC3. Then we broke down a real scam DM that hit an AutoApplyMax user this month.
Skip the scams. Apply to verified Easy Apply listings only.
AutoApplyMax auto-applies exclusively on verified LinkedIn Easy Apply postings + curated ATS feeds. No random recruiter DMs, no off-platform pivots.
Install Free Extension1. The 2026 job market is a mirage
Clarify Capital's "Ghost Jobs 2.0" study is the most-cited data on the problem:
- 93% of HR professionals admit posting jobs they don't intend to fill (45% regularly, 48% occasionally)
- ~27% of US LinkedIn listings are likely ghost postings
- 1 in 5 US openings is never filled — mid-2025 BLS data: 7.4M openings vs 5.2M hires
A separate April 2026 Forbes/Greenhouse study put the cross-board rate at 1 in 7 postings. Numbers differ because platforms and industries differ — but every serious study lands somewhere between "one in seven" and "one in four."
2. The five reasons companies post ghost jobs
Recruiters told Fast Company the same five stories over and over:
- Pipeline building. "We might need a senior PM in Q3, let's collect resumes now." The #1 reason.
- Growth signaling. Posting 40 openings makes the company look like a rocket ship to investors, partners, and press — regardless of hiring rate.
- Employee morale. "If your peers see 12 open roles under our team, they'll assume promotions are coming — and stay."
- Salary reconnaissance. "Post at a competitor's job title and read the applicant asks. Free market research."
- ATS metrics + diversity math. Some companies keep listings live to hit quarterly application counts, or to demonstrate outreach to underrepresented candidate pools even when no offer is coming.
None of these reasons involve you, the applicant, ever getting an interview.
3. Case study: "CoreFusion Solutions" — anatomy of a modern LinkedIn scam
📨 Real DM received by an AutoApplyMax user, August 2026:
"Thank you for your interest in the opportunity posted on LinkedIn. We are currently supporting our recruitment partner, CoreFusion Solutions, in sourcing candidates for several remote positions connected to an ongoing international project. These opportunities provide flexible work arrangements, including both full-time and part-time schedules based on individual availability. Previous experience is not essential, as successful applicants will receive full training and onboarding assistance before starting.
Eligibility Criteria:
• Must be at least 25 years old
• Must currently be based in France
• Must possess valid authorization to work in France
• Must have a personal French bank account for payroll processing
If you would like to learn more about the opportunity, please respond with: 'Yes, please share more details'"
↩ 24 hours later, from the same LinkedIn account:
"Hi, please ignore the previous messages sent from my account. They were not sent by me and appear to be unauthorized. Please do not click any links or share any personal information. I have secured my account now."
Every single element of that first message is a documented scam pattern:
- Age gate ("Must be 25+"): filters out minors who might tell parents. Targets adults with real bank accounts.
- Geo gate ("Must be France-based"): the scammer needs a domestic IBAN so bank transfers look local. Wise/Revolut auto-flag foreign-payee mismatches.
- "French bank account for payroll": this is the pivot. Either advance-fee ("we need €50 to activate your payroll card") or, worse, money-mule — they deposit stolen funds, ask you to forward via crypto keeping 10%, and you're now laundering.
- "No experience required" + vague "international project": no verifiable JD, no company website that predates 2026. Google "CoreFusion Solutions site:linkedin.com" — nothing that ties to a real legal entity.
- Instant move to WhatsApp: LinkedIn Trust & Safety data (via Rest of World, 2025) shows ~90% of LinkedIn job scams attempt this pivot. Off-platform = no moderation, no report button, deletable evidence.
- The "account was hijacked" follow-up: confirms Pattern 3 in Rest of World's taxonomy — takeover of a real profile with real connections, DM blast for 24-72h, then owner recovers control and disclaims. The recovery message is often genuine; the initial DMs never were.
4. Why LinkedIn is the perfect hunting ground
LinkedIn is the only social platform where "verified job history" is the core trust signal. Users assume a profile with 500+ connections, a real employer badge, and a photo is legitimate. But LinkedIn has:
- No mandatory ID verification (the optional "verified" checkmark is behind a paywall in most markets)
- Weak 2FA adoption — most accounts are password-only
- No cross-check between a claimed employer and the employer's HR system
- 80.6M fake accounts blocked at registration in H2 2024 alone — a scale that implies many get through
Result: a hijacked mid-career profile trades for $200-$500 on dark markets because it converts DMs 10× better than a cold email from an unknown address. The economics of the scam favor volume.
The FBI's 2025 IC3 report puts total US cybercrime losses at $20.9 billion, with employment fraud and DPRK "remote worker" scams named as top drivers. The FTC's Consumer Sentinel logged 20,000 task/job scam reports in H1 2024 alone, up from zero in 2020 — median loss $2,000.
"Nine out of ten LinkedIn job scams end the same way: 'Let's move this to WhatsApp.' The moment a recruiter asks for a French bank account before you've had a single video call, you're not being hired — you're being harvested."
5. The 6 red flags that mean "close the tab"
Save this list. Print it. Every scam we reviewed has at least three of these:
- Bank account request before signed contract. Real employers set up payroll AFTER a contract, via HR portal, never over DM.
- No video interview scheduled. Legitimate 2026 hiring uses at minimum a 15-min Google Meet or Zoom before an offer. If they refuse camera, they're not real.
- Pivot to WhatsApp / Telegram / Signal. LinkedIn T&S data: 90% of scams do this. Kill the thread. Report via LinkedIn's "Report message → scam" flow.
- "No experience required" + vague international project. Cross-check the company on Google, Companies House (UK), Sirene (FR), the state business registry (US). If there's no filing older than 6 months, it's manufactured.
- Age gates ("must be 25+") or geo/bank gates. Legal hiring in Western markets doesn't work like this. These filters exist because the scam needs specific bank profiles.
- Urgency + unpaid "onboarding" fees or crypto asks. Any request for money, gift cards, or crypto to "start" is 100% scam. No exceptions.
6. What jobseekers can do today
- Enable 2FA on LinkedIn (Settings → Sign in & security → Two-step verification). Blocks most account takeovers.
- Reverse-image the recruiter's photo using TinEye or Google Lens. Stolen headshots (often from Instagram or old Twitter avatars) are the #1 tell.
- Report LinkedIn scams natively. Message → three-dot menu → Report → "It's a scam" — LinkedIn's Trust & Safety team actions these quickly.
- Report US job scams to the FTC at reportfraud.ftc.gov or 1-877-FTC-HELP. EU: your national CERT (in France: cybermalveillance.gouv.fr).
- Never send bank details or ID docs via DM. Real HR uses secure portals (BambooHR, Rippling, Workday).
7. How AutoApplyMax filters signal from noise
We built AutoApplyMax specifically because the "apply to 30 things per week" strategy is only viable if you can trust the pipe. Our approach:
- Verified LinkedIn Easy Apply only. The Easy Apply badge means the employer paid for the posting and passed LinkedIn's employer verification. We don't touch cold InMails or unsolicited DMs.
- Curated ATS feeds. Today's Picks pulls from direct employer portals (Greenhouse, Workday, Lever, Ashby) via the WhatJobs aggregator network — real jobs from real HR systems.
- 30-day freshness filter. Any listing older than 30 days is presumed stale (ghost-job dead zone). We drop it.
- No off-platform pivots. Our extension never forwards to WhatsApp, Telegram, or personal DMs. If a recruiter reaches out to you after applying, that's the employer's choice — but the initial application flow stays inside vetted portals.
The bottom line
Between ghost jobs (up to 27% of listings) and hijacked LinkedIn accounts (80M+ removed per half-year), at least a quarter of the "opportunities" you see are noise. The fix isn't to apply less — it's to apply through verified channels, faster, with better filters.
If a "recruiter" in your DMs wouldn't survive the 6-red-flags checklist above, they're not offering you a job. They're testing which candidates are desperate enough to hand over a bank account. Don't be that candidate.
Apply through verified pipes. Skip the noise.
AutoApplyMax auto-applies on verified LinkedIn Easy Apply + curated ATS feeds only. 30-day freshness filter. Never pivots off-platform. Free.
Install Free Chrome Extension