Looking for work? 5 ways to stay safe when job hunting online

Malaysian jobseekers are turning to online platforms and social media more than ever. With data breaches, scams, and fraud on the rise, staying alert and following a few smart habits can help you job hunt with confidence. 

Ku Sim Ling, Human Resources Expert (affectionately known as “AuntyHR”), and David Blair-Turner, Principal Cybersecurity Consultant at Cyber-Sheriff, share 5 practical tips to help you stay secure while exploring your next career opportunity online. 

1. Share personal information through safe platforms like SEEK Pass, not your resume 

If you need to share personal information during a job search, make sure to use secure platforms like SEEK Pass to ensure your private information is protected. For most job applications, it’s not necessary to share your personal documents in your resume or via email. 

 Avoid sharing personally identifiable information including: 

• Identification Card (IC) or passport number 
• Bank account or financial details 
• Medical history or blood type 
• Family information (marital status, children, etc.) 
• Criminal history 

AuntyHR advises, “Your CV should focus on basics like work history, general location (state or city), contact number, email, and certifications. Sensitive info can be requested later in the official hiring process.” 

Using SEEK Pass is a safer way to manage and share your credentials. You can verify your qualifications and add them to your Jobstreet profile for employers to view the verified results without accessing the underlying document. This ensures your sensitive information stays private while giving employers confidence in your credentials, not just for the current job application but for all future applications as well. 

To use SEEK Pass, log in to your Jobstreet profile, navigate to the verification section, and follow the prompts to verify your identity, qualifications and credentials. You only need to complete this process once, and use it across all current and future job applications. 

2. Verify email addresses, company logos, and links 

Legitimate employers usually contact applicants via official emails and maintain consistent branding. AuntyHR advises checking: 

• Email domain—does it match the company website? 
• Company logo—blurry or inconsistent logos may signal a scam 
• Overall tone and formatting—real recruiters write clearly, professionally, and politely; they should not be pushy or overly enthusiastic. 

Blair-Turner explains, “Phishing emails are a common tactic. Even AI-generated emails can look perfect but often have small inconsistencies, like a misspelt domain (e.g., @seekcom.my instead of @seek.co.my). Stay focused, check everything carefully, and hover over links to preview URLs before clicking. If you’re unsure, always verify the sender through official channels before providing any information.” 

3. Check how and where the job is advertised 

Where a job is posted can indicate its legitimacy. AuntyHR warns against roles shared only on social media or messaging apps, “If a job isn’t listed on a reputable portal, ask yourself why. Be extra careful with offers that sound too good to be true, like a work-from-home data-entry job on Instagram paying RM5,000 a week from overseas, or requests to leave product reviews online for hundreds of ringgit in gift cards. These are usually not legitimate.” 

Blair-Turner adds, “Scammers now use artificial intelligence (AI) to craft professional-looking ads that can fool even careful jobseekers. They often target people when they’re eager or stressed about finding work, because emotions can cloud judgment. If an opportunity feels unusually perfect or rushed, slow down and verify.” 

“Legit employers won’t pressure you to share sensitive info or make payments right away.” says AuntyHR. 

4. Trust your instincts and verify before sharing 

Before sharing information, ask yourself: 

• Is this information needed now?  
  Your Identification Card (IC), passport, or bank details are rarely required in the early stages of an application. 
• Can I verify their credentials?  
  Start simple: check the company’s official website, email, and customer reviews. If you’re still unsure, request the company registration number and office address via the official email or phone, and cross-check the details. A legitimate employer won’t mind sharing these, and they’ll also appreciate you flagging any potential fraud involving their details. 
• Am I sharing information safely?  
  Whenever possible, use secure ways to share documents, like password-protected files or platforms that restrict access. Always get your references' permission before sharing their details, as you shouldn’t pass along someone else’s information without their consent. 

Blair-Turner adds, “Legitimate companies have secure methods for collecting sensitive information. They won’t rush you for IC, passport, or bank details upfront, and they use verified processes with security measures like password protection or multi-factor authentication to keep your data safe.” 

5. Don’t hesitate to ask questions 

It’s always okay to ask why information is needed and how it will be stored. 

AuntyHR says, “A legitimate company will explain the process. Asking questions shows you’re thoughtful and serious about protecting your data.” 

“Being cautious is part of your responsibility as a jobseeker, and reporting suspicious job ads helps keep others safe too. The more we look out for each other, the stronger our human firewall becomes.” adds Blair-Turner  

Quick cheat sheet: What’s safe to share and what’s risky 

Safe (initially): 

• Work history 
• General location (state or city) 
• Email and contact number 
• Names of certifications or licenses (other specifics like numbers can be shared later) 

Risky (unless onboarding): 

• Bank account details 
• Tax / Employees Provident Fund (EPF) number 
• Scans/photos of IC, passport, or other official identification cards 

Red flag: 

• Being asked to pay money before starting work 

Common job scams to watch out for in Malaysia: 

• Fake work-from-home roles—e.g., data entry or handicraft jobs advertised on social media, promising unusually high pay. 
• Reselling or commission-based jobs—where you’re asked to pay upfront or transfer money to get started. 
• Part-time or casual work via messaging apps—often impersonating legitimate companies. Even seemingly professional-looking ads can be scams in disguise, so slow down and verify every detail before sharing your personal information. If something feels off, pause and ask questions; a genuine employer will appreciate your diligence.