Job Scams in Sri Lanka: Verify Before You Apply

A suspicious job advert may copy a real company's name, use a convincing logo or promise unusually easy income. The useful response is a verification process: identify the employer, check the application route and understand why any information or payment is being requested.

For Sri Lankan job seekers, Sri Lanka CERT provides an official incident-reporting route. Its website directs social-media incidents and financial fraud or scam reports to its reporting portal.

Check the source independently

Open the employer's official website yourself and find its career or contact information. Compare the role, reference and contact details with the message you received.

A link inside a suspicious message is not an independent check. Look carefully at the domain name, but remember that a secure connection icon alone does not establish that the organisation is legitimate.

If a recruiter represents an agency, verify the agency and its relationship to the role. Ask a precise question through an official channel rather than sending more personal documents to the unverified sender.

Watch for requests that do not fit the stage

An initial application should have a clear purpose and document requirement. Be cautious when a supposed recruiter asks for login codes, remote access to your device or payment to “unlock” work.

A single signal does not prove a crime. It identifies something to verify before you act.

Use a verification log

For a fictional message offering a remote data-entry role, record the sender, date, claimed employer, exact request and the source used to check it.

If the employer's official contact says the vacancy is not theirs, stop the application and preserve the evidence. Do not continue the conversation just to see what happens.

If you cannot establish the employer or the role, you do not need to send sensitive documents while waiting. A legitimate-looking screenshot is still only a screenshot.

If you have already shared information

Stop further disclosure and save relevant messages, links and payment records. If credentials were shared, change them through the genuine service and review available account-security controls.

If money or banking information is involved, contact the relevant financial institution through its official channel promptly. Use Sri Lanka CERT's reporting route for applicable cyber incidents and seek the appropriate official assistance for your situation.

Do not pay another person who promises guaranteed recovery. Keep your evidence organised so the relevant service or authority can understand what happened.

Build safer application habits

Use a professional email account with strong account protection. Store CVs and certificates privately and share only what the verified process requires.

Separate public portfolio material from private application documents. A portfolio should not expose identity numbers, signatures or other people's contact details.

Discuss suspicious messages with a trusted person when pressure makes it hard to think clearly. The purpose is to create a pause for verification.

Does a company logo prove a message is genuine?

No. Names and images can be copied. Confirm the sender and vacancy through independent official information.

Are all recruitment fees scams?

Do not make a blanket assumption. Verify the specific charge, recipient and legal process through the relevant official authority or employer before paying.

Should you publish the sender's personal details?

Preserve evidence for the appropriate reporting route. Avoid spreading unverified accusations or private information in a public post.

Related guides

• Job Vacancies in Sri Lanka: A Better Application Plan
• Government Job Applications in Sri Lanka: Checklist
• Bank Trainee Jobs in Sri Lanka: Application Guide

Browse the Sri Lanka work and technology guides for more practical application, AI and workplace projects.