WebVetted

linkedin Scam Encyclopedia

2 Common Linkedin Scams & How To Avoid Them

Every pattern below is under active review by WebVetted analysts. Use this master playbook to compare screenshots, chat transcripts, or listings before you pay anyone claiming to operate on linkedin.

social media Scam

LinkedIn BEC Invoice DM Scam

Scammers DM finance staff with fake invoices or payment links, hoping the message bypasses email security. WebVetted examines the sender’s history, attachments, and linked domains to uncover the fraud.

Red flags

  • Message references an invoice number you cannot match in ERP.
  • Sender refuses to move the discussion into corporate email.
  • Payment link routes to shortened URLs or crypto addresses.

How to Respond

  1. Check the sender with the LinkedIn Checker to confirm tenure and references.
  2. Verify invoices via your finance system and call vendors using known numbers.
  3. Submit suspicious DMs to LinkedIn and forward evidence to your SOC.

📌 Case study

One attacker impersonated a supplier CFO and demanded expedited payments through Wise. Another DM dropped a poisoned SharePoint link that requested Microsoft logins before showing the “invoice.”

social media Scam

LinkedIn Founder Impostor Scam

Attackers clone executive profiles, then message staff about urgent payments or data requests. WebVetted tracks employment history, endorsements, and shared connections to confirm whether the “founder” is real.

Red flags

  • Profile created recently with only a handful of connections.
  • Work history misses obvious milestones or lists overlapping timelines.
  • Messages request W-2s, payroll updates, or gift card runs on first contact.

How to Respond

  1. Paste the profile into the LinkedIn Checker to compare employment signals and mutual connections.
  2. Call the company’s main line or Slack the real executive before following any instructions.
  3. Report the impostor to LinkedIn and warn your security team with the WebVetted report.

📌 Case study

We traced a cluster of fake fintech founders who asked accounting teams to send international wires. Another impersonator stole a biotech CEO’s bio and used it to phish job applicants for passports.

Verification steps

Put the playbook to work

How to Check a Suspicious LinkedIn Profile or Message

Both scams above rely on LinkedIn's built-in credibility: a profile photo, a job title, and a connection count that look real at a glance. None of those signals are hard to fake, which is why checking before you act on a payment request or a data ask matters more than the platform's own verification badges.

  1. 1 Check the account's creation date, connection count, and whether its work history has gaps or overlapping timelines that don't add up.
  2. 2 Verify any payment or data request through a second channel — a phone call to a known number, or a message inside your company's own systems — before acting on anything requested over a LinkedIn DM.
  3. 3 Compare a recruiter or executive's profile against the company's official team page or press mentions, especially if they're reaching out cold.
  4. 4 Run the profile through the LinkedIn Profile Checker to pull employment history, endorsements, and shared-connection signals into one place before you respond.

No single signal proves a profile is fake. A clean result means nothing suspicious surfaced in that pass, not a guarantee the person is who they claim to be — verifying through a second channel alongside the profile check is what actually protects you and your team.

Before you take action

Commonly asked questions about Linkedin Scams

Is LinkedIn a scam?

No, LinkedIn itself is a legitimate professional networking platform. The scams that show up on it, like fake invoice DMs and impersonated executives, are run by bad actors using real accounts or cloned profiles, not by LinkedIn as a company.

Are there scam jobs on LinkedIn?

Yes. Fake job postings and recruiter accounts do appear on LinkedIn, often designed to collect personal information or push upfront "training fee" payments. If you're evaluating a specific job posting or recruiter for legitimacy, WebVetted's job-scam checks (via the Job Posting Checker) cover that scenario directly; this page focuses on the DM-based invoice and impostor-founder patterns aimed at existing employees, not job-seeker scams.

How can I tell if a LinkedIn recruiter is fake?

Look for a recently created profile with few connections, vague or inconsistent details about the role or company, and requests for sensitive information (SSN, bank details) early in the conversation, before any formal offer process has started.

How do I report a scam on LinkedIn?

Use LinkedIn's built-in "Report" option on the profile or message, and if money or sensitive data was involved, also report it to the FTC at reportfraud.ftc.gov and, for your company, to your internal security team.

Need evidence for a bank or police report?

Generate a full entity dossier plus user-submitted reviews and then share the PDF with law enforcement or platform trust teams.