Recruitment-related identity theft can begin with a form that looks professional but has no clear relationship to the claimed employer.
What matters in practice
A first-stage enquiry normally does not require a bank password, online banking access or payment-card information. Passports and immigration documents are sensitive and should not be uploaded to unfamiliar recruitment websites.
Check the domain name carefully and navigate to the employer from a trusted source. HTTPS protects the connection, but it does not prove the site is operated by the named company.
Skills, decisions and verification
Before sharing information, look for a privacy notice explaining who controls data, why it is collected, how long it is kept and how deletion can be requested. Legitimate organizations should have a process for responding to privacy concerns.
If you suspect your data was exposed, stop communicating with the suspicious actor, preserve evidence and seek guidance from appropriate cybersecurity or consumer-protection authorities.
Practical next steps
Share the minimum necessary data, verify recipient identity, use strong unique passwords and keep records of requests.
Important note
This article is an independent educational guide. It is not a job advertisement, an employer statement, or immigration or legal advice. Verify openings and current requirements with official sources.