Fake Crypto Jobs on LinkedIn: Scammers Net $11.8 Million

LinkedIn is more than just a digital résumé for many of us – it’s a place to network, grow, and discover new opportunities. But this very connectivity also makes the platform a prime target for cybercriminals. In recent months, a particularly brazen scam trend has been on the rise: fake crypto jobs that have cost victims millions. In Singapore alone, scammers have swindled approximately $11.8 million in recent months – a staggering figure that highlights just how sophisticated these criminals have become.
I myself received a LinkedIn message a few weeks ago that followed this exact scam pattern – a seemingly legitimate job offer from a major crypto company. Fortunately, I was skeptical enough not to fall for it, but it infuriated me to see how realistic these fraud attempts have become.
---
How the Scam Works – And Why It’s So Dangerous
It all usually starts innocently enough: a connection request or a message from someone claiming to be a recruiter at a well-known crypto company. The salary? Attractive. The work conditions? Flexible. Everything sounds too good to be true – and that’s exactly the point.
The scammers lure victims with “technical aptitude tests” that include what appears to be a coding assessment and an interview. The catch? To take the “test,” you’re asked to visit a fake platform – and install software that’s actually malware. Even worse, some versions of the scam software demand you use your own trusted device. The supposed reason? “Strict data privacy policies” of the company.
Once the malware is installed, the real attack begins. Scammers steal session tokens – the digital keys you receive after logging in that allow you to stay logged in. While many crypto platforms use two-factor authentication (2FA), the scammers have found a way around it, too. They redirect you during the test to a fake login page where you unknowingly hand over your 2FA codes.
---
From Account Theft to Total Loss
Once attackers gain access to your account, everything happens in a matter of minutes. Your funds are transferred to external wallets or moved to manipulated crypto exchanges. Because blockchain transactions are irreversible, victims are often left with little recourse other than filing a police report – and by then, the trail of the stolen funds is usually already cold.
But the criminals don’t stop there. They use your stolen accounts to recruit even more victims. Your LinkedIn profile becomes a tool to send connection requests that point to the same fake job offers, creating a dangerous domino effect wher



e more and more people fall into the trap.
---
How You Can Protect Yourself – Before It’s Too Late
Security researchers who uncovered this scam warn against trusting seemingly legitimate job offers – especially when they come through social media or messaging apps. Keep an eye out for these red flags:
1. Unusual Contact Methods: Legitimate companies rarely conduct job interviews via LinkedIn messages or WhatsApp.
2. Upfront Payments or “Aptitude Tests”: No real company charges a fee for an interview or asks you to install your own tools.
3. Inconsistencies in Communication: Poor grammar, generic greetings (“Dear Applicant”), or pressure to act quickly are classic signs of fraud.
4. Suspicious Requirements: Requests to use screen-sharing software like AnyDesk or to grant access to private data are major warning signs.
I can’t stress enough how important it is to regularly review your security protocols – like checking for unknown devices or IP addresses with access. Multi-factor authentication (MFA) shouldn’t rely solely on SMS, as these codes can easily be intercepted. Instead, use app-based solutions like Google Authenticator or hardware tokens.
---
Why LinkedIn Must Do More
LinkedIn has come under fire for not doing enough to combat these scams. While there are options to report fake profiles, many victims say their complaints are ignored or only addressed after long delays. The platform argues that while it uses algorithms to detect fraudulent activity, absolute security isn’t guaranteed.
But this is where I see room for improvement. LinkedIn needs to collaborate more closely with cybersecurity firms to identify new scam patterns and block them proactively. It should also do more to educate users – through regular warning messages or interactive training on cybercrime.
---
Stay Vigilant – Because Scammers Never Sleep
Recent incidents once again prove how bold and creative cybercriminals can be when it comes to cryptocurrencies and digital assets. While the technology itself is secure, the weakest link in the chain is often the human factor. Being aware of the risks and following basic security practices can go a long way in protecting yourself.
At the same time, platforms like LinkedIn need to step up their security measures and better educate users. One thing is certain: as long as there are lucrative targets, scammers won’t stop – and they’ll keep refining their methods.
So stay skeptical, question unusual offers, and protect your data. In the digital age, trust is good, but verification is even better.