Job Scams in Saudi Arabia: How to Spot a Fake Offer
A fake job offer in Saudi Arabia almost always asks for one of three things: money, a verification code, or your identity documents outside an official platform. Real employers ask for none of them before a signed contract. If any of the three appears, stop — regardless of how professional the message looks.
Recruitment scams got much better at looking real. They use the correct program names, copy real job titles, and write in fluent Arabic and English. What they cannot fake is the process: how offers actually arrive, which domain sends them, and what a real employer needs from you at each stage. This guide gives you the red flags, a five-check verification routine you can run in six minutes, and the reporting channels. It is part of our job search guide for Saudi Arabia.
Quick answer
- Never pay. No fee for a job, a visa, a “file opening”, or mandatory paid training tied to a role.
- Never share a code. Absher and Nafath one-time codes authorise actions on your identity. Nobody legitimate asks for them.
- Check the domain. Real offers come from the company’s own domain, not from Gmail, Outlook, or a lookalike spelling.
- Match the process. Tamheer, Jadarat, and Taqat opportunities are applied for and awarded on their official platforms, not over WhatsApp.
- If money moved, call your bank first, then report through Kollona Amn or 330330.
What do recruitment scams actually look like?
Four patterns cover the overwhelming majority of cases in the Saudi market.
The fee-first offer. You are “accepted” for a role you barely remember applying to, then asked for a payment: visa processing, medical examination, file activation, a refundable deposit, or a paid certification the employer “requires”. The amount is usually small enough to feel plausible and large enough to be worth their effort.
The code harvest. Someone claiming to be a recruiter, a ministry officer, or a bank employee sends you a code and asks you to read it back “to verify your identity” or “to complete your file”. That code is authorising something on your account right now.
The program impersonation. A message offers you a seat in a well-known training or employment program, sometimes with the correct stipend figure and duration, and asks for a fee or a code to “reserve” it. Government-funded programs are applied for through their own platforms.
The WhatsApp recruiter. A profile with a company logo contacts you about a role, conducts a short “interview” by text, and issues an offer letter as an image. No video call, no company email, no in-person or platform-based process at any point.
Annotated: a fee-demand message
What arrives: “Congratulations! You have been selected for the position of Administrative Officer at [Company]. To complete your appointment, transfer 750 SAR for visa and medical file processing to the account below within 24 hours, otherwise the seat will be given to another candidate.”
Four separate red flags in four lines:
- An offer for a job you did not go through a process for. No interview, no assessment, no conversation.
- A payment request. The single clearest signal there is.
- A personal or unnamed bank account. Companies do not collect employment fees into an individual’s account.
- Urgency. The 24-hour deadline exists to stop you from checking.
Annotated: a code-phishing message
What arrives: “Ministry service — a job application has been registered in your name. To confirm it, please send the verification code sent to your phone. Do not ignore this message so your application is not cancelled.”
The tell is structural, not linguistic: no legitimate entity ever needs a code that was sent to you. The code exists precisely so that only the person holding the phone can approve an action. Someone asking for it is asking you to approve their action on your identity.
Weak reaction: “It looks official, I’ll send the code and sort it out after.”
Strong reaction: Send nothing. Open the official app yourself, directly, and check whether any action is pending.
The five-check verification routine
Run this before you send documents, attend anything, or reply with personal data. Six minutes, and it kills almost every scam.
| # | Check | How | Fail signal |
|---|---|---|---|
| 1 | Did I apply? | Search your email and platform history for this company | An “offer” with no application behind it |
| 2 | Is the domain real? | Compare the sender domain letter by letter with the official site | Free mail, or a near-miss spelling |
| 3 | Does the vacancy exist? | Look for the same role on the company careers page or the platform they name | The role exists nowhere else |
| 4 | Is the company registered? | Check the commercial registration through the Ministry of Commerce | No trace, or a name that does not match |
| 5 | Is money or a code involved? | Read the message again | Any request for either — stop immediately |
Two notes on check 2, because it catches the most cases. Scam domains work by near-misses: an extra letter, a swapped rn for m, a .co instead of .com.sa, or the real company name in front of a public mail service. Read the part immediately before the first slash, character by character. Everything before the @ can say anything at all.
And on check 4: a real company has a real footprint — a commercial registration, a website with a physical address, employees on LinkedIn whose profiles predate this week. A fresh page with a logo and nothing behind it is not a company.
Are fake Tamheer and government-program offers common?
Yes, because the programs are well known, genuinely desirable, and involve a real monthly stipend — which makes an impersonated version instantly credible to a fresh graduate.
The defence is knowing the actual process. Tamheer opportunities run through the Human Resources Development Fund and are applied for on Taqat; you apply, and the training establishment selects through the platform. There is no version of this in which a stranger reserves you a seat, no version in which you pay to be enrolled, and no version in which a code you received by SMS is read out to a third party.
The same logic applies to the other national channels: Jadarat for private-sector vacancies and Taqat registration for job-seeker services. If a message about any of them arrives outside the platform and asks for something, treat the message as the fake — not the program. Details of how the real one works are in the Tamheer program guide.
One more distinction worth holding: an employer legitimately asking you to complete steps on an official platform is normal. A person asking you to send them something instead of using the platform is not.
What if a recruiter contacts me on WhatsApp?
Recruiters do use WhatsApp in Saudi Arabia, so the channel alone is not proof of anything. What matters is whether the conversation ever leaves it.
Reasonable: an initial message, a request for your CV, then a move to a company email address, a scheduled call, and a documented process.
Not reasonable: a full hiring process conducted entirely in a chat thread, an offer letter delivered as a JPEG, and a request for identity documents or payment before you have spoken to anyone.
A safe reply that costs you nothing if the recruiter is genuine:
Thanks for reaching out. Could you send the details from
your company email address, along with the job posting
link? Happy to schedule a call after that.Genuine recruiters answer this in one line. Scammers go quiet, get pushy, or explain why the company email “isn’t working”. If you are the one doing the outreach instead, the safer direction is contacting real people at real companies yourself — see recruiter outreach messages that get answered.
Where do I report a recruitment scam?
Act in this order, and do not skip step 1 if money left your account.
- Your bank, immediately. Report the transfer and ask about a recall. Speed is the only variable you control here.
- Kollona Amn or 330330. The Kollona Amn app from the General Directorate of Public Security receives fraud and cybercrime reports, and 330330 is the number publicised for fraud reporting. Reports can also be filed through Absher services or at a police station.
- The Ministry of Human Resources on 19911 for labor-market violations, including fee demands connected to employment.
- The platform. Report and block the account on WhatsApp, LinkedIn, or wherever it reached you, so the profile stops working on the next person.
Keep everything before you delete anything: screenshots of the full conversation including the phone number and profile, the transfer receipt, the email headers if there was an email, and a written timeline with dates. Because channels and numbers change over time, confirm the current reporting route on the official platform before relying on a number you read anywhere — including here.
Weak report: “Someone scammed me on WhatsApp last month, I think it was a fake company.”
Strong report: “On 12 June, number +966XXXXXXXXX, using the name [Company], requested 750 SAR to a named account for visa processing. Transfer receipt attached, full conversation attached, no application was ever submitted by me.”
Slow down the one moment they need to be fast
Every one of these scams depends on a single compressed minute: a deadline, a limited seat, a code that expires. The countermeasure is boring and total — never act inside that minute. Close the message, verify independently, come back.
And the strongest long-term protection is not needing to be flattered by an unexpected offer in the first place. A steady pipeline you built yourself, from real postings on real platforms, makes an out-of-nowhere “congratulations” look as strange as it should. TrueSira helps with that side: one Master Profile holding your real experience, and a tailored CV built from the actual job description for roles you chose to apply to — with you approving every line. Get started free.
FAQ
How do I know if a job offer is fake?
Check three things in order. Did you actually apply, or did this arrive out of nowhere? Does the sender’s domain match the company’s official website exactly, character by character? And is any money, verification code, or identity document being requested before a signed contract? A genuine offer needs none of those to move forward, and a scam almost always needs at least one of them. Urgency — a 24-hour deadline, a seat about to be given away — is the fourth signal.
Is it legal for an employer to ask for fees?
No legitimate Saudi employer or licensed recruitment office charges a job seeker to obtain a job, process a visa, open a file, or take a mandatory paid training that supposedly leads to one. Any payment request to secure a role should stop the conversation immediately. If a demand like this comes from an entity claiming to be a real establishment, report it to the Ministry of Human Resources on 19911 alongside the fraud report.
Should I ever share my Absher or Nafath code?
Never, under any circumstances. Those one-time codes exist so that only the person holding the phone can authorise an action on their identity. No employer, recruiter, bank employee, or government officer will ask you to read one back by phone, WhatsApp, or email. If someone asks, the request itself is the proof of fraud — do not send it, and check the official app directly to see whether an action is pending on your account.
How do I verify a company is real before applying?
Compare the email domain letter by letter with the official website, watching for extra characters, swapped letters, and .co in place of .com.sa. Look for the same vacancy on the company’s own careers page or on the platform the message claims it came from. Check the commercial registration through the Ministry of Commerce. Then look for employees on LinkedIn whose profiles existed before this week. A company with a logo and no footprint is not a company.
Where do I report a recruitment scam in Saudi Arabia?
If money moved, call your bank first and ask about recalling the transfer, because speed decides that outcome. Then report the fraud through the Kollona Amn app from the General Directorate of Public Security, the publicised fraud number 330330, Absher services, or a police station. Report employment-related violations such as fee demands to the Ministry of Human Resources on 19911. Keep screenshots, receipts, and a dated timeline, and confirm the current channel officially before relying on any number.
Are Tamheer offers ever sent by WhatsApp?
Tamheer opportunities run through the Human Resources Development Fund and are applied for and awarded on Taqat, where the training establishment selects candidates through the platform. Nobody reserves a seat for you privately, nobody charges you to enrol, and no code sent to your phone should ever be shared to confirm a placement. A WhatsApp message offering a Tamheer seat in exchange for a fee or a code is not a Tamheer offer, whatever names and figures it quotes.